Now *can* retrieve attributes for LDAP!
Erdos, Marlena
marlena_erdos at harvard.edu
Fri Jan 11 20:07:36 EST 2013
Huge thanks, Michael, Peter, Brent, and Scott! I got a boatload of
attributes from after the fixes. Yippee!
I had two errors in my filter invocation: I was missing curly braces and I
was using "principal" instead of "principalName". (I'm setting "principal"
in the http header that my actual external authN
system returns to my external authN servlet co-located with the IdP. I'd
forgotten that the servlet turns the "principal" contents into
"PRINCIPAL_NAME_KEY" in its "returnToAuthenticationEngine" call.)
Here is the working filter invocation.
<dc:FilterTemplate>
<![CDATA[
(harvardeduidnumber=${requestContext.principalName})
]]>
</dc:FilterTemplate>
Thank you again! It was great to get the connection to LDAP working
before the weekend.
My best,
Marlena
More information about the users
mailing list