<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<div>
<blockquote type="cite">
<div>On Oct 16, 2024, at 11:22 AM, Mark Boyce via users <users@shibboleth.net> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: HelveticaNeue-Medium; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">Morning all,<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">I’m experiencing what would be best described as the LDAP Connection intermittently reverting to the default values as described in bug JSATTR-33. We’re running the latest Shibboleth,
v5.1.3, which is supposed to have included a fix for the issue. So I’m at a loss here…<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">From the IdP Process log:<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">2024-10-11 14:03:33,012 - 10.49.173.183 - WARN [org.ldaptive.auth.Authenticator:509] - Entry resolution failed for resolver=[org.ldaptive.auth.SearchEntryResolver@1229362959::factory=null,
baseDn=, userFilter=null, userFilterParameters=null, allowMultipleEntries=false, subtreeSearch=false, derefAliases=NEVER, binaryAttributes=null, entryHandlers=null]<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">org.ldaptive.LdapException: Error resolving entry for<span class="Apple-converted-space"> </span><a href="mailto:ebreed@ucop.edu"><span style="color: rgb(70, 120, 134);">[username here]@ucop.edu</span></a>.
Unsuccessful search response:<span class="Apple-converted-space"> </span><a href="mailto:org.ldaptive.SearchResponse@-1954686158::messageID=4363"><span style="color: rgb(70, 120, 134);">org.ldaptive.SearchResponse@-1954686158::messageID=4363</span></a>, controls=[],
resultCode=INVALID_DN_SYNTAX, matchedDN=, diagnosticMessage=0000208F: NameErr: DSID-03100232, problem 2006 (BAD_NAME), data 8350, best match of:<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;"> '<a href="mailto:ebreed@ucop.edu">ebreed@ucop.edu</a>'<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;">, referralURLs=[], entries=[], references=[]<o:p></o:p></div>
<div style="margin: 0in; font-size: 12pt; font-family: Aptos, sans-serif;"> at org.ldaptive.auth.AbstractSearchEntryResolver.resolve(AbstractSearchEntryResolver.java:297)<o:p></o:p></div>
</div>
</div>
</blockquote>
<br>
</div>
<div>I believe this is related to IDP-2287, not JSATTR-33.</div>
<div>Confirm that idp.authn.LDAP.returnAttributes is commented out in your configuration.</div>
<div><br>
</div>
<div>Note that these log entries are WARN, not ERROR.</div>
<div><br>
</div>
<div>—Daniel Fisher</div>
<div><br>
</div>
</body>
</html>