Dynamic baseDN in DataConnector tag of attribute-resolver.xml file

[Thierry Albain]

I did it, but without success.
Has someone done it before ?


On Fri, Dec 16, 2011 at 16:06, Chad La Joie <lajoie at itumi.biz> wrote:

> Refer to the documentation for what the template language supports.
>
> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <talbain at sqli.com> wrote:
> > Hi everybody
> >
> > I work with the latest version of Shibboleth.
> >
> > I would like to configure my LDAP Dataconnector with a dynamic baseDN
> which
> > depends on the result of the principalName.
> > For example, here is my (bad) DataConnector:
> >
> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
> >       ldapURL="ldap://localhost:389"
> >       baseDN="cn=${requestContext.principalName}, ou=users, ou=mycompany,
> > c=com"
> >       principal="cn=Directory Manager"
> >       principalCredential="************"
> >       searchScope="ONELEVEL">
> >       <dc:FilterTemplate>
> >           <![CDATA[
> >               (cn=*)
> >           ]]>
> >       </dc:FilterTemplate>
> >       <dc:ReturnAttributes>cn</dc:ReturnAttributes>
> > </resolver:DataConnector>
> >
> > If I authenticate with my own credentials (id=talbain), I should find
> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com
> > It doesn't work, but how can I proceed to succeed ?
> >
> > Thanks a lot
> >
> > Thierry ALBAIN
> >
> >
> > --
> > To unsubscribe from this list send an email to
> > users-unsubscribe at shibboleth.net
>
>
>
> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111216/e6781c33/attachment.html