userFilter arguments in login.config from login.jsp

[Henry B. Hotz]

I assume you can't include the ou in the search base because you may need either?

On Apr 28, 2013, at 2:58 PM, Juan Mucarquer <juan.mucarquer at alumnos.usm.cl> wrote:

> Hello,
> 
> I'm using vt-ldap in order to login users. The problem is there are duplicate UIDs in the LDAP, but in different OUs. 
> 
> For example exists:
> uid=john.doe,ou=people,dc=university,dc=edu
> uid=john.doe,ou=students,dc=university,dc=edu
> 
> In login.config, the userFilter is set by default:
> 
> userFilter=(uid={0})
> 
> Where {0} is the uid supplied in the AuthUserPassLoginPage (login.jsp). 
> 
> As I'm reading in the vt-ldap documentation, its possible to pass another argument to the login module (userFilterArgs). Thats my question, how I can pass the OU argument ({1}) from the login.jsp, in order to login users like userFilter=(uid={0},ou={1})?

I think that would be

userFilter=(&(uid={0})(ou={1}))

> Currently, I cannot login users where this happens, due to the search returns multiple DNs, and tries to login with the first it finds.
> 
> Thanks a lot!
> 
> -- 
> Juan Andrés Mucarquer.
> UTFSM
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu