Dynamic baseDN in DataConnector tag of attribute-resolver.xml file
Chad La Joie
lajoie at itumi.biz
Fri Dec 16 15:06:29 GMT 2011
Refer to the documentation for what the template language supports.
On Fri, Dec 16, 2011 at 09:57, Thierry Albain <talbain at sqli.com> wrote:
> Hi everybody
>
> I work with the latest version of Shibboleth.
>
> I would like to configure my LDAP Dataconnector with a dynamic baseDN which
> depends on the result of the principalName.
> For example, here is my (bad) DataConnector:
>
> <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
> ldapURL="ldap://localhost:389"
> baseDN="cn=${requestContext.principalName}, ou=users, ou=mycompany,
> c=com"
> principal="cn=Directory Manager"
> principalCredential="************"
> searchScope="ONELEVEL">
> <dc:FilterTemplate>
> <![CDATA[
> (cn=*)
> ]]>
> </dc:FilterTemplate>
> <dc:ReturnAttributes>cn</dc:ReturnAttributes>
> </resolver:DataConnector>
>
> If I authenticate with my own credentials (id=talbain), I should find
> entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com
> It doesn't work, but how can I proceed to succeed ?
>
> Thanks a lot
>
> Thierry ALBAIN
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
--
Chad La Joie
www.itumi.biz
trusted identities, delivered
More information about the users
mailing list