assigning eduperson based on memberof

[Douglas E. Engert]

On 7/11/2013 10:17 AM, Morris, Andi wrote:
> Hi all,
>
> We currently assign eduPersonAffiliation depending on Active Directory group membership, but there is a bit of a crossover with two of our groups starting with the same string.
>
> Users that are members of the group “STUDENT” get added the ‘student’ value added to the eduPersonAffiliation attribute just fine, but members of the group “STU” are members of our student union and
> need to be given the value ‘member’, except that they are being given ‘student’.
>
> The code I’m using to get this is:
>
> “                if (value.contains("student")) {
>
>                      eduPersonAffiliation.getValues().add("student");
>
> “
>

The AD memberOf attribute returns the DN of the group. Does the DN  for STU also contain the string student?


> I’ve tried changing value.contains to value.equals, but this just ends up with neither group being assigned a value for this attribute.
>
> Can anybody please help with this scripting query? Apologies that it’s not strictly a shibboleth issue.
>
> Cheers,
>
> Andi
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444