Providing ldap group names as an attribute revisited

[Tom Zeller]

> I would be grateful if you can suggest how I modify my
> <resolver:DataConnector> and <resolver:AttributeDefinition> (see below) to
> extract the attributes as shown above?

I think the sourceAttributeID of the isMemberOf AttributeDefinition
should be "cn" rather than "member".

>     <resolver:AttributeDefinition id="isMemberOf" xsi:type="Simple"
> xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>                                  sourceAttributeID="member">
>         <resolver:Dependency ref="ldapGroups" />
>         <resolver:AttributeEncoder xsi:type="SAML2String"
> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>                                    name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1"
> friendlyName="isMemberOf" />
>     </resolver:AttributeDefinition>
>

>     <resolver:DataConnector id="ldapGroups" xsi:type="dc:LDAPDirectory"
>         ldapURL="ldap://wellfleet1.wellfleetsoftware.com:10389/"
>         baseDN="dc=springframework,dc=org"
>         principal="uid=admin,ou=system"
>         principalCredential="ldap1"
>         maxResultSize="500"
>         mergeResults="true">
>         <dc:FilterTemplate>
>              <![CDATA[
>
> (&(objectclass=groupOfNames)(member=uid=$requestContext.principalName,ou=people,dc=springframework,dc=org))
>              ]]>
>         </dc:FilterTemplate>
>     </resolver:DataConnector>