operational ldap attributes shib idp 3.x

[Raffael Sahli]

On 04/09/2015 11:53 AM, Jarno Huuskonen wrote:
> Hi,
>
> On Thu, Apr 09, Raffael Sahli wrote:
>> I have changed it into:
>> idp.authn.LDAP.returnAttributes = *,memberOf
> I think "idp.authn.LDAP.returnAttributes" is not used for
> attribute-resolver (ldap.properties):
> "## Return attributes during authentication
> ## NOTE: this is not used during attribute resolution; configure that
> directly in the
> ## attribute-resolver.xml configuration via a DataConnector's
> <dc:ReturnAttributes> element
> "
>
> We have <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
> ...
> <dc:ReturnAttributes>* isMemberOf</dc:ReturnAttributes>
> ...
> </resolver:DataConnector>
>
> in attribute-resolver.xml and it seems to work.h
Argh, of course it works the same way as 2.x :)

"<dc:ReturnAttributes>* +</dc:ReturnAttributes>"

I was just confused with this new "idp.authn.LDAP.returnAttributes"

Thanks


>
> -Jarno
>


-- 
Raffael Sahli

gyselroth™ – Agentur für Brand Identity und Digital Media.
Albisriederstrasse 226
8047 Zürich
Switzerland

+41 44 404 22 44

sahli at gyselroth.com
http://www.gyselroth.com