assigning eduperson based on memberof

[Morris, Andi]

Yes it does, thanks! At least I now know where it's getting this from.

I'll look to see what I can do to change this.

Cheers all,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
Sent: 11 July 2013 16:52
To: users at shibboleth.net
Subject: Re: assigning eduperson based on memberof



On 7/11/2013 10:17 AM, Morris, Andi wrote:
> Hi all,
>
> We currently assign eduPersonAffiliation depending on Active Directory group membership, but there is a bit of a crossover with two of our groups starting with the same string.
>
> Users that are members of the group "STUDENT" get added the 'student' 
> value added to the eduPersonAffiliation attribute just fine, but members of the group "STU" are members of our student union and need to be given the value 'member', except that they are being given 'student'.
>
> The code I'm using to get this is:
>
> "                if (value.contains("student")) {
>
>                      eduPersonAffiliation.getValues().add("student");
>
> "
>

The AD memberOf attribute returns the DN of the group. Does the DN  for STU also contain the string student?


> I've tried changing value.contains to value.equals, but this just ends up with neither group being assigned a value for this attribute.
>
> Can anybody please help with this scripting query? Apologies that it's not strictly a shibboleth issue.
>
> Cheers,
>
> Andi
>
>
>
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net