question on attribute resolver filter

[Chad La Joie]

sAMAcountName is not an attribute available on the request context.
You might try requestContext.princiaplName assume the userid provided
at login time is what you want to use in the filter.

On Fri, Oct 14, 2011 at 12:48, Leonard Kroll <Leonard.Kroll at umb.edu> wrote:
> Hi, I am binding to the AD LDAP, but getting an event 1535, problem 2001, no
> object found.
>
> It seems this is caused by an invalid filter in the request.
>
> Can someone point out what I am doing wrong in the filter?
>
>
>
> The user is identified by sAMAccountName and authenticates using it.
>
>
>
> All help is greatly appreciated
>
> ~lennyK
>
>
>
>
>
> <resolver:AttributeDefinition xsi:type="ad:Simple" id="sAMAccountName"
> sourceAttributeID="sAMAccountName"
> xmlns="urn:mace:shibboleth:2.0:resolver:ad">
>
> <resolver:Dependency ref="myLDAP" />
>
> <resolver:AttributeEncoder xsi:type="enc:SAML1String"
> name="urn:mace:dir:attribute-def:sAMAccountName" />
>
> <resolver:AttributeEncoder xsi:type="enc:SAML2String"
> name="urn:oid:1.2.840.113556.1.4.221" friendlyName="sAMAccountName" />
>
> </resolver:AttributeDefinition>
>
>
>
>
>
>     <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory"
> xmlns="urn:mace:shibboleth:2.0:resolver:dc"
>
>         ldapURL="ldap://xxx.xxx.xxx.xxx"
>
>         baseDN="ou=staff,dc=umassb,dc=net"
>
>         principal="aaaaa.bbbbb at umassb.net"
>
>         principalCredential="xxxxxxxxxx”
>
>         lowercaseAttributeNames="true"
>
>         noResultIsError="true"
>
>         searchScope="SUBTREE">
>
>
>
>         <dc:FilterTemplate>
>
>             <![CDATA[
>
>                 (sAMAccountName=($requestContext.sAMAccountName))
>
>            ]]>
>
>         </dc:FilterTemplate>
>
>         <LDAPProperty name="java.naming.referral" value="follow"/>
>
>     </resolver:DataConnector>
>
>
>
>
>
> Leonard Kroll
> UNIX / GIS Administrator
> Univ. Massachusetts Boston
> Leonard(dot)Kroll(at)umb.edu
> Phone: 617-287-5048
> fax:      617-287-5224
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered