<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div>LDAP is LDAP. Over the years our Shibboleth IdP has been configured to use 4 different vendor's LDAP product. </div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">The bind account and password, search base, the acls granted to the bind account so it can see users/groups & their attribute data, the search filter and etc are all important elements to have properly configured. Use any command
line ldapsearch tool as a way to test what your shibboleth bind account can see. Also look in your Shibboleth logs folder which can lead you what your issue might be. </div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">I use OpenLDAP's command line ldapsearch, ldapmodify and etc tools. Here's an example:</div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">ldapsearch -x -LLL -h <a href="http://apacheLDAPserver.nitssolutions.com">
apacheLDAPserver.nitssolutions.com</a> -p 389 -D cn=shibBindAccount,ou=utilityaccounts,dc=nitssolutions,dc=com -W -Z -b ou=users,<span style="background-color: rgba(255, 255, 255, 0);">dc=nitssolutions,dc=com "(cn=yourLoginID)"</span></div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">Change syntax accordingly for your environment. </div>
<div id="AppleMailSignature"><br>
</div>
<div id="AppleMailSignature">Don<br>
<br>
<span style="background-color: rgba(255, 255, 255, 0);">-- <br>
D o n a l d L o h r<br>
I n f o r m a t i o n S y s t e m s<br>
J a m e s M a d i s o n U n i v e r s i t y<br>
5 4 0 . 5 6 8 . 3 7 3 0</span></div>
<div><br>
On Aug 23, 2020, at 3:40 PM, Amit Dongaonkar <<a href="mailto:amitd@nitssolutions.com">amitd@nitssolutions.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">
<div class="gmail_default" style="font-family:garamond,serif">Hello group,</div>
<div class="gmail_default" style="font-family:garamond,serif">Wondering if any one has attempted to integrate Shibboleth IdP 3.4 with Apache DS ?</div>
<div class="gmail_default" style="font-family:garamond,serif">I am able to make Shibboleth talk with Apache DS but it is not able to find any users in the DS even though users are created in the DS.</div>
<div class="gmail_default" style="font-family:garamond,serif"><br>
</div>
<div>
<div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div><font face="garamond, serif">Thanks and Regards,</font></div>
<div><font face="garamond, serif"><br>
</font></div>
<div>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
<b><span style="font-size:12pt">Amit Dongaonkar</span></b></p>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
<i><span style="font-size:12pt">Snr. Technical Architect Lead</span></i><i><span style="font-size:12pt"></span></i></p>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
o: <font color="#000000">(248) 284-4035</font> m: <font color="#000000">(248) 385-6033</font></p>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
40850 Grand River Ave #100, Novi, MI 48375</p>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
<span style="color:rgb(17,85,204)"><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.nitssolutions.com_&d=DwMFaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=G_lStGYnvHEwhFdhkvaqInDp01V9Rm5IozgtsxrUiI0&s=YXUiybO4Npo6v6nLw_NxPHwpyouVX_547CwGT0M9C_8&e=" style="color:rgb(17,85,204)" target="_blank">www.nitssolutions.com</a></span></p>
<p style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial">
<img border="0" width="120" height="91" src="cid:image001.png@01D29DA4.739D6D20" alt="unnamed" style="width:1.25in;height:0.9479in"></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>For Consortium Member technical support, see <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=G_lStGYnvHEwhFdhkvaqInDp01V9Rm5IozgtsxrUiI0&s=nGosFOeiF_P4PCMrsUqh7yKND4w5klhWqNj6Ci3S5_Q&e=">
https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=Pa2DB88IW_s2TyLfktHtWA&m=G_lStGYnvHEwhFdhkvaqInDp01V9Rm5IozgtsxrUiI0&s=nGosFOeiF_P4PCMrsUqh7yKND4w5klhWqNj6Ci3S5_Q&e=</a>
</span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span><br>
</div>
</blockquote>
</body>
</html>