Dynamic baseDN in DataConnector tag of attribute-resolver.xml file

Thierry Albain talbain at sqli.com
Fri Dec 16 14:57:59 GMT 2011


Hi everybody

I work with the latest version of Shibboleth.

I would like to configure my LDAP Dataconnector with a dynamic baseDN which
depends on the result of the principalName.
For example, here is my (bad) DataConnector:

<resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
      ldapURL="ldap://localhost:389"
      *baseDN*="cn=${*requestContext.principalName*}, ou=users,
ou=mycompany, c=com"
      principal="cn=Directory Manager"
      principalCredential="************"
      searchScope="ONELEVEL">
      <dc:FilterTemplate>
          <![CDATA[
              (cn=*)
          ]]>
      </dc:FilterTemplate>
      <dc:ReturnAttributes>cn</dc:ReturnAttributes>
</resolver:DataConnector>

If I authenticate with my own credentials (id=talbain), I should find
entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com
It doesn't work, but how can I proceed to succeed ?

Thanks a lot

Thierry ALBAIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111216/882c3bad/attachment.html 


More information about the users mailing list