Multiple ldap DataConnectors returning attributes wit the same name

David Bantz dabantz at alaska.edu
Wed Jun 5 19:01:51 EDT 2013


On Wed, 5 Jun 2013, at 14:14 , "Cantor, Scott" <cantor.2 at osu.edu> wrote:

> On 6/5/13 4:02 PM, "Douglas E. Engert" <deengert at anl.gov> wrote:
>> 
> 
> I think what you'd normally end up doing to work around it is to generate
> attribute definitions based on each connector individually, and then
> depend on those definitions in whatever higher level definition needs both….
> -- Scott

Like this I believe:

        <!-- Distinguish the values of cn from two directories with same attribute name -->

        <resolver:AttributeDefinition id="cn1" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="cn">
         <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="https://iam.alaska.edu/...#cn1" friendlyName="cn1" />
        </resolver:AttributeDefinition>

        <resolver:AttributeDefinition id="cn2" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID=cn">
         <resolver:Dependency ref="uaADLDAP" />
        <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="https://iam.alaska.edu/...#cn2" friendlyName="cn2" />
        </resolver:AttributeDefinition>





More information about the users mailing list