<div dir="ltr">Setting up a secondary test IdP using test instance of directory for authN, I get the following error in logs:<div><br></div><div>







<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-s1">ERROR [] net.shibboleth.utilities.java.support.service.AbstractReloadableService:231 >  Service 'shibboleth.AttributeResolverService': Reload for shibboleth.AttributeResolverService failed<br></span><span class="gmail-s1">net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 1748 in XML document from file [/opt/shibboleth-idp/conf/attribute-resolver.xml] is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 1748; columnNumber: 125; The entity name must immediately follow the '&' in the entity reference.</span></blockquote><div><br></div><div>That appears to be referring to the & as part of the bind credential in a data connector:</div><div><br></div>







<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font face="arial, helvetica, sans-serif" color="#000000"><span class="gmail-s2"><</span><span class="gmail-s3">resolver</span><span class="gmail-s4">:</span><span class="gmail-s2">DataConnector </span><span class="gmail-s5">id</span><span class="gmail-s1">=</span><span class="gmail-s6">"uaADLDAP"</span><span class="gmail-s2"> </span><span class="gmail-s5">xsi</span><span class="gmail-s4">:</span><span class="gmail-s5">type</span><span class="gmail-s1">=</span><span class="gmail-s6">"LDAPDirectory"</span><span class="gmail-s2"> </span><span class="gmail-s5">xmlns</span><span class="gmail-s1">=</span><span class="gmail-s6">"urn:mace:shibboleth:2.0:resolver:dc" ... </span><span class="gmail-s5">principalCredential</span><span class="gmail-s1">=</span><span class="gmail-s6">"********&"</span><span class="gmail-s2"> ></span> </font></blockquote><div><br></div><div>which seems to say I need to have the bind password not end with (or contain?) the "&" character.</div><div><br>Can that be right? </div><div><br></div><div>David Bantz</div><div><br></div>
</div></div>