<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Apr 27, 2018 at 9:04 AM, Losen, Stephen C. (scl) <span dir="ltr"><<a href="mailto:scl@virginia.edu" target="_blank">scl@virginia.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Is it possible to configure the JAAS LDAP module in IDP 3.3.2 to do the equivalent of the directAuthenticator on the non-JAAS LDAP password verify module?  To verify the user's password you bind with the user's DN using the user's password, rather than using a service bind account and search.<br></blockquote><div><br></div><div>You can override the DN resolver in your JAAS config like so:</div><div><br></div><div>dnResolver="org.ldaptive.auth.FormatDnResolver{{format=cn=%s,ou=myorg,dc=myschool,dc=edu}}" </div><div><br></div><div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">The FormatDnResolver constructs a DN using String.format, where the input is the user argument.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">(Which is what the directAuthenticator uses.)</div></div></div><div>Or you can plug in your own implementation.<br></div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>