Multiple ldap DataConnectors returning attributes wit the same name
David Bantz
dabantz at alaska.edu
Wed Jun 5 19:01:51 EDT 2013
On Wed, 5 Jun 2013, at 14:14 , "Cantor, Scott" <cantor.2 at osu.edu> wrote:
> On 6/5/13 4:02 PM, "Douglas E. Engert" <deengert at anl.gov> wrote:
>>
>
> I think what you'd normally end up doing to work around it is to generate
> attribute definitions based on each connector individually, and then
> depend on those definitions in whatever higher level definition needs both….
> -- Scott
Like this I believe:
<!-- Distinguish the values of cn from two directories with same attribute name -->
<resolver:AttributeDefinition id="cn1" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID="cn">
<resolver:Dependency ref="myLDAP" />
<resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="https://iam.alaska.edu/...#cn1" friendlyName="cn1" />
</resolver:AttributeDefinition>
<resolver:AttributeDefinition id="cn2" xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" sourceAttributeID=cn">
<resolver:Dependency ref="uaADLDAP" />
<resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder" name="https://iam.alaska.edu/...#cn2" friendlyName="cn2" />
</resolver:AttributeDefinition>
More information about the users
mailing list