Dynamic baseDN in DataConnector tag of attribute-resolver.xml file
Thierry Albain
talbain at sqli.com
Fri Dec 16 14:57:59 GMT 2011
Hi everybody
I work with the latest version of Shibboleth.
I would like to configure my LDAP Dataconnector with a dynamic baseDN which
depends on the result of the principalName.
For example, here is my (bad) DataConnector:
<resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
ldapURL="ldap://localhost:389"
*baseDN*="cn=${*requestContext.principalName*}, ou=users,
ou=mycompany, c=com"
principal="cn=Directory Manager"
principalCredential="************"
searchScope="ONELEVEL">
<dc:FilterTemplate>
<![CDATA[
(cn=*)
]]>
</dc:FilterTemplate>
<dc:ReturnAttributes>cn</dc:ReturnAttributes>
</resolver:DataConnector>
If I authenticate with my own credentials (id=talbain), I should find
entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com
It doesn't work, but how can I proceed to succeed ?
Thanks a lot
Thierry ALBAIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111216/882c3bad/attachment.html
More information about the users
mailing list