<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jun 29, 2016, at 3:40 PM, Daniel Fisher <<a href="mailto:dfisher@vt.edu" class="">dfisher@vt.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote">On Wed, Jun 29, 2016 at 3:11 PM, Eu <span dir="ltr" class=""><<a href="mailto:0bahba@gmail.com" target="_blank" class="">0bahba@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr" class=""><div class="">How can I use the same method on Shibboleth 3.2.1?</div><div class="">I can not found the authorizationFilter option.</div></div></blockquote><div class=""><br class=""></div><div class="">The notion of coupling authorization in the authentication API was not ported from vt-ldap to ldaptive.</div><div class="">You should get the same fundamental behavior with a properly configured filter:</div><div class=""><br class=""></div><div class="">userFilter="(&(<span style="font-size:12.8px" class="">Federated=Y</span>)(uid={user}))" </div><div class=""><br class=""></div><div class="">--Daniel Fisher</div><div class=""><br class=""></div></div></div></div></div></blockquote><br class=""></div><div>That points out another difference in JAAS config from v2 to v3, in that his sample config used "userField", not "userFilter". I discovered earlier today that you get an ERROR message if there is no "userFilter" specified:</div><div><br class=""></div><div> Invalid userFilter, cannot be null or empty.</div><div><br class=""></div><div>I took it that means that the options of just listing the fields to be searched as values of userField no longer works, you must put them in the form of a userFilter.</div><div apple-content-edited="true" class=""><br class="">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.
</div>
<br class=""></body></html>