More information in requestContext.principalName

[Daniel Fisher]

On Fri, May 3, 2013 at 11:38 AM, Juan Andrés Mucarquer <
juan.mucarquer at alumnos.usm.cl> wrote:

> On 05/03/2013 09:55 AM, Kevin P. Foote wrote:
> > Not sure if I'm understanding what you want to do .. but believe what
> > you are trying to do is to pull in attributes to your authenticated
> > principal.
>
> No, my problem is that the authenticated principal (the one who passed
> the JAAS successfully) is not the same user whose attributes are being
> pulled. This caused because the LDAP DataConnector finds another user
> with the same uid first.
>
> What I'm trying to achieve is to use another LDAP attribute to search
> this user in the LDAP DataConnector, like employeeNumber for example, or
> pass the entire DN coming from JAAS/VT-LDAP to use it in this
> DataConnector.
>

If you want the DN set as the principal, use the following options in your
JAAS config:
    setLdapPrincipal="false"
    setLdapDnPrincipal="true"

You can then use an object level search for your attribute resolution.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130504/beb68ee9/attachment.html