Assigning edupersonaffiliation attribute with AD

[Morris, Andi]

Thanks, I had found these and was trying to work out how it would work with our AD setup.

I have also since found this:
http://blog.marcturner.co.uk/2010/09/shibboleth-idp-getting.html

This has a working example of assigning the attribute using the memberof tag, which I'm going to have a play with.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: 30 April 2013 15:03
To: 'Shib Users'
Subject: RE: Assigning edupersonaffiliation attribute with AD

> How do you all assign the eduPersonAffiliation attribute to your users?
> Currently we use the following script to assign it based on
> Organisational Unit, but this is starting to prove too limiting as we
> have users within
the
> same OUs that I’d like to assign different edupersonaffiliation
> attributes
to.

I know nothing of AD, but I happened to be reviewing the samples recently.
Can

https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttribute
DefinitionExamples

Provide any help ?  In particular “generate eduPersonAffiliation based on recursive group membership in Active Directory” looks at memberOf() which might be interesting for you.


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
________________________________

From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>