assigning eduperson based on memberof

[Manuel Haim]

Hi Andi,

well, it's actually ECMAScript (a.k.a. JavaScript), see
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition

Something like this should work:

if (value.contains("student") && !value.contains("union")){
  eduPersonAffiliation.getValues().add("student");
}

-Manuel



Am 12.07.2013 10:52, schrieb Morris, Andi:
> Is there a way I can change the logic to:
>  "                if (value.contains("student") AND value does not contain("union")){
> 
>                       eduPersonAffiliation.getValues().add("student");
> 
> I'm not familiar at all with this scripting language (jquery is it?), so would really appreciate someone's help with this.
> 
> Cheers,
> Andi
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
> Sent: 11 July 2013 17:02
> To: Shib Users
> Subject: RE: assigning eduperson based on memberof
> 
> Yes it does, thanks! At least I now know where it's getting this from.
> 
> I'll look to see what I can do to change this.
> 
> Cheers all,
> Andi
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
> Sent: 11 July 2013 16:52
> To: users at shibboleth.net
> Subject: Re: assigning eduperson based on memberof
> 
> 
> 
> On 7/11/2013 10:17 AM, Morris, Andi wrote:
>> Hi all,
>>
>> We currently assign eduPersonAffiliation depending on Active Directory group membership, but there is a bit of a crossover with two of our groups starting with the same string.
>>
>> Users that are members of the group "STUDENT" get added the 'student' 
>> value added to the eduPersonAffiliation attribute just fine, but members of the group "STU" are members of our student union and need to be given the value 'member', except that they are being given 'student'.
>>
>> The code I'm using to get this is:
>>
>> "                if (value.contains("student")) {
>>
>>                      eduPersonAffiliation.getValues().add("student");
>>
>> "
>>
> 
> The AD memberOf attribute returns the DN of the group. Does the DN  for STU also contain the string student?
> 
> 
>> I've tried changing value.contains to value.equals, but this just ends up with neither group being assigned a value for this attribute.
>>
>> Can anybody please help with this scripting query? Apologies that it's not strictly a shibboleth issue.
>>
>> Cheers,
>>
>> Andi
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to 
>> users-unsubscribe at shibboleth.net
>>
>