custom attribute question

Paul Hethmon paul.hethmon at clareitysecurity.com
Thu Nov 15 17:05:02 EST 2012


Scott was asking you to verify that in your LDAP connector, the value
returned is named "emailalias" in a case sensitive manner.

You are telling Shib to ask the myLDAP data source for something called
exactly "emailalias". Is it there?

Paul

On 11/15/12 4:59 PM, "Daksh Chauhan" <um.daksh at gmail.com> wrote:

>This is what we have in LDAP: oleMissEduPersonBoxEligible
>
>From: "attribute-resolver.xml"
>    <!-- Custom LDAP Attributes Defined here -->
>    <resolver:AttributeDefinition xsi:type="ad:Simple"
>               id="oleMissEduPersonBoxEligible"
>sourceAttributeID="oleMissEduPersonBoxEligible">
>        <resolver:Dependency ref="myLDAP" />
>    </resolver:AttributeDefinition>
>
>Thanks,
>
>
>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>On
>Behalf Of Cantor, Scott
>Sent: Thursday, November 15, 2012 3:41 PM
>To: Shib Users
>Subject: Re: custom attribute question
>
>On 11/15/12 4:39 PM, "Daksh Chauhan" <um.daksh at gmail.com> wrote:
>>
>>We have a custom attribute defined in LDAP to store Email-aliases and
>>need help to configure this in Shibboleth.
>
>What is the case-sensitive name of the LDAP attribute?
>
>>I know this attribute is released by LDAP for the user shibboleth is
>>using for bind, but when I run aacli.sh I do not see this attribute in
>>the result.
>
>It probably isn't called emailalias in LDAP.
>
>-- Scott
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net



More information about the users mailing list