Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: subtree scope is what most of the people want. I missed it because I don't need (flat directory). Please look: https://code.google.com/p/vt-middleware/issues/detail?id=220&q=ldaptive

...

Code Block
ShibUserPassAuth {
    org.ldaptive.jaas.LdapLoginModule sufficient
    ldapUrl="ldap://ldap1.test.com:389"
    baseDn="ou=people,dc=example,dc=com"
    bindDn="cn=idp,ou=agents,dc=example,dc=com"
    subtreeSearch="true"
    bindCredential="secret"
    useStartTLS="true"
    authenticationControls="org.ldaptive.control.PasswordPolicyControl"   
    authenticationResponseHandlers="org.ldaptive.auth.ext.PasswordPolicyAuthenticationResponseHandler"
    userFilter="(uid={user})";
}

...