Providing ldap group names as an attribute revisited

[Farrukh Najmi]

Doh! That was it. Before it was returning the DN of the person instead 
of the CN of the group. Now it return the CN of the group as expected.
This also helps me understand how <resolver:AttributeDefinition> works.

Thanks Tom. With the help from you, Scott and David, I believe I have it 
working as I wanted with my existing users.ldif file.

You guys are really awesome. Thanks again.

On 06/14/2013 01:26 PM, Tom Zeller wrote:
>> I would be grateful if you can suggest how I modify my
>> <resolver:DataConnector> and <resolver:AttributeDefinition> (see below) to
>> extract the attributes as shown above?
> I think the sourceAttributeID of the isMemberOf AttributeDefinition
> should be "cn" rather than "member".
>
>>      <resolver:AttributeDefinition id="isMemberOf" xsi:type="Simple"
>> xmlns="urn:mace:shibboleth:2.0:resolver:ad"
>>                                   sourceAttributeID="member">
>>          <resolver:Dependency ref="ldapGroups" />
>>          <resolver:AttributeEncoder xsi:type="SAML2String"
>> xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
>>                                     name="urn:oid:1.3.6.1.4.1.5923.1.5.1.1"
>> friendlyName="isMemberOf" />
>>      </resolver:AttributeDefinition>
>>
>>      <resolver:DataConnector id="ldapGroups" xsi:type="dc:LDAPDirectory"
>>          ldapURL="ldap://wellfleet1.wellfleetsoftware.com:10389/"
>>          baseDN="dc=springframework,dc=org"
>>          principal="uid=admin,ou=system"
>>          principalCredential="ldap1"
>>          maxResultSize="500"
>>          mergeResults="true">
>>          <dc:FilterTemplate>
>>               <![CDATA[
>>
>> (&(objectclass=groupOfNames)(member=uid=$requestContext.principalName,ou=people,dc=springframework,dc=org))
>>               ]]>
>>          </dc:FilterTemplate>
>>      </resolver:DataConnector>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


-- 
Regards,
Farrukh Najmi

Web: http://www.wellfleetsoftware.com