resolving attributes from a different OU- best approach?

[Martin Haase]

Hi Sean,

and one simplification: if you know beforehand all your dependent
objects are under ou=offices, you can split differently (not on the
comma), grepping for the value "a80cb6744". Then you'd not need the
"ou:dn:=value" syntax, simplifying to:

    <resolver:DataConnector ....
        baseDN="ou=offices" ...>
        <resolver:Dependency ref="splitOfficesAttributeValue" />
        <dc:FilterTemplate>
            <![CDATA[
                (ou=$splitOfficesAttributeValue.get(0))
            ]]>
        </dc:FilterTemplate>
        ...

Cheers
Martin

Am 10.02.2015 um 09:44 schrieb Martin Haase:
> This does work with OpenLDAP, I'm not sure if other LDAP implementations
> support the "ou:dn:=value" syntax.

-- 
Dr. Martin Haase, Solutions Engineer

DAASI International GmbH        
Europaplatz 3                   
D-72072 Tübingen                
Germany                    

phone: +49 7071 407109-6
fax:   +49 7071 407109-9  
email: martin.haase at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2227 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/users/attachments/20150210/9b1b0fb4/attachment.bin