Dynamic baseDN in DataConnector tag of attribute-resolver.xml file

[Thierry Albain]

I found my solution in ldap filter.
Here is the good data connector :

<resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"
      ldapURL="ldap://localhost:389"
      *baseDN*="ou=users, ou=mycompany, c=com"
      principal="cn=Directory Manager"
      principalCredential="************"
      searchScope="*SUBTREE*">
      <dc:FilterTemplate>
          <![CDATA[
              (&(objectClass=theGoodOne)(cn:dn:=$*
requestContext.principalName*))
          ]]>
      </dc:FilterTemplate>
      <dc:ReturnAttributes>cn</dc:ReturnAttributes>
</resolver:DataConnector>

Actually, It just needs to have a cn attribute in the dn that matches with
the login of the principal.

Regards,

Thierry ALBAIN



On Fri, Dec 16, 2011 at 17:22, Thierry Albain <talbain at sqli.com> wrote:

> OK, Thanks a lot Chad.
> I understand it's more a ldap question than a Shibboleth one.
> Best regards,
> Thierry ALBAIN
>
>
> On Fri, Dec 16, 2011 at 17:19, Chad La Joie <lajoie at itumi.biz> wrote:
>
>> Set the base DN to whatever is appropriate for your LDAP server and
>> then use an appropriate search filter.
>>
>> On Fri, Dec 16, 2011 at 11:13, Thierry Albain <talbain at sqli.com> wrote:
>> > Ok, we have the same conclusions.
>> > So, do you know if there is another way to obtain what I want ?
>>
>> --
>> Chad La Joie
>> www.itumi.biz
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111216/fec98924/attachment.html