Dynamic baseDN in DataConnector tag of attribute-resolver.xml file

Chad La Joie lajoie at itumi.biz
Fri Dec 16 15:27:21 GMT 2011


You haven't said what you actually want to do.  The example you showed
filled in your user ID into a string.  That's what the example in the
docs show to.  So yes, you can do that.

On Fri, Dec 16, 2011 at 10:23, Thierry Albain <talbain at sqli.com> wrote:
> I did it, but without success.
> Has someone done it before ?
>
>
> On Fri, Dec 16, 2011 at 16:06, Chad La Joie <lajoie at itumi.biz> wrote:
>>
>> Refer to the documentation for what the template language supports.
>>
>> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <talbain at sqli.com> wrote:
>> > Hi everybody
>> >
>> > I work with the latest version of Shibboleth.
>> >
>> > I would like to configure my LDAP Dataconnector with a dynamic baseDN
>> > which
>> > depends on the result of the principalName.
>> > For example, here is my (bad) DataConnector:
>> >
>> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
>> >       ldapURL="ldap://localhost:389"
>> >       baseDN="cn=${requestContext.principalName}, ou=users,
>> > ou=mycompany,
>> > c=com"
>> >       principal="cn=Directory Manager"
>> >       principalCredential="************"
>> >       searchScope="ONELEVEL">
>> >       <dc:FilterTemplate>
>> >           <![CDATA[
>> >               (cn=*)
>> >           ]]>
>> >       </dc:FilterTemplate>
>> >       <dc:ReturnAttributes>cn</dc:ReturnAttributes>
>> > </resolver:DataConnector>
>> >
>> > If I authenticate with my own credentials (id=talbain), I should find
>> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com
>> > It doesn't work, but how can I proceed to succeed ?
>> >
>> > Thanks a lot
>> >
>> > Thierry ALBAIN
>> >
>> >
>> > --
>> > To unsubscribe from this list send an email to
>> > users-unsubscribe at shibboleth.net
>>
>>
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered


More information about the users mailing list