cannot pull isMemberOf attribute
Cameron Kerr
cameron.kerr at otago.ac.nz
Thu Mar 6 18:15:44 EST 2014
Not sure about your LDAP, but we have a similar situation where the attribute must be explicitly requested. You can specify the list of attributes to request in attribute-resolver.xml
Earlier in the log you should be able to see what attributes were pulled from ldap.
Cheers,
Cameron
Sent from my iPhone
> On 7/03/2014, at 11:45 am, "Qian, Yi" <yqian at ku.edu> wrote:
>
> Hello,
>
> In our LDAP contains isMemberOf attribute which is multi valued, actual value is the group DN, such as "cn=group1, ou=groups,dc=ku,dc=edu".
>
> In the shib log, I saw following
> 15:56:39.758 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:314] - Resolving attribute isMemberOf for principal yqian 15:56:39.758 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:336] - Resolved attribute isMemberOf containing 0 values
>
> Does anyone know why the isMemberOf did not return with values?
>
> Thanks
> Yi
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list