assigning eduperson based on memberof

[Morris, Andi]

Thank you so much Manuel, that works like a charm.

Time to brush up on my scripting.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Manuel Haim
Sent: 12 July 2013 10:55
To: users at shibboleth.net
Subject: Re: assigning eduperson based on memberof

Hi Andi,

well, it's actually ECMAScript (a.k.a. JavaScript), see https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition

Something like this should work:

if (value.contains("student") && !value.contains("union")){
  eduPersonAffiliation.getValues().add("student");
}

-Manuel



Am 12.07.2013 10:52, schrieb Morris, Andi:
> Is there a way I can change the logic to:
>  "                if (value.contains("student") AND value does not contain("union")){
> 
>                       eduPersonAffiliation.getValues().add("student");
> 
> I'm not familiar at all with this scripting language (jquery is it?), so would really appreciate someone's help with this.
> 
> Cheers,
> Andi
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net 
> [mailto:users-bounces at shibboleth.net] On Behalf Of Morris, Andi
> Sent: 11 July 2013 17:02
> To: Shib Users
> Subject: RE: assigning eduperson based on memberof
> 
> Yes it does, thanks! At least I now know where it's getting this from.
> 
> I'll look to see what I can do to change this.
> 
> Cheers all,
> Andi
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net 
> [mailto:users-bounces at shibboleth.net] On Behalf Of Douglas E. Engert
> Sent: 11 July 2013 16:52
> To: users at shibboleth.net
> Subject: Re: assigning eduperson based on memberof
> 
> 
> 
> On 7/11/2013 10:17 AM, Morris, Andi wrote:
>> Hi all,
>>
>> We currently assign eduPersonAffiliation depending on Active Directory group membership, but there is a bit of a crossover with two of our groups starting with the same string.
>>
>> Users that are members of the group "STUDENT" get added the 'student' 
>> value added to the eduPersonAffiliation attribute just fine, but members of the group "STU" are members of our student union and need to be given the value 'member', except that they are being given 'student'.
>>
>> The code I'm using to get this is:
>>
>> "                if (value.contains("student")) {
>>
>>                      eduPersonAffiliation.getValues().add("student");
>>
>> "
>>
> 
> The AD memberOf attribute returns the DN of the group. Does the DN  for STU also contain the string student?
> 
> 
>> I've tried changing value.contains to value.equals, but this just ends up with neither group being assigned a value for this attribute.
>>
>> Can anybody please help with this scripting query? Apologies that it's not strictly a shibboleth issue.
>>
>> Cheers,
>>
>> Andi
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to 
>> users-unsubscribe at shibboleth.net
>>
> 

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net