Problem sending email address as NameID in subject

Andrew Cheung acheung at brookfieldres.com
Mon Jan 19 16:29:27 EST 2015


Hi. I have problems sending the email address as NameID in the subject. (I
use Novell eDirectory as the datastore and access it using LDAP).

Any help is appreciated.

Here is my configuration :

Shibboleth version : 2.4.3

attribute-filter.xml :

<afp:AttributeFilterPolicy id="releaseGoogleMySiteAEmail">
  <afp:PolicyRequirementRule xsi:type="basic:NOT">
     <basic:Rule xsi:type="basic:AttributeRequesterString" value="
https://google.com/a/dev.mysiteA.ca"/>
  </afp:PolicyRequirementRule>
  <afp:AttributeRule attributeID="GoogleMySiteAEmail">
    <afp:PermitValueRule xsi:type="basic:ANY" />
  </afp:AttributeRule>
</afp:AttributeFilterPolicy>

-----------------

attribute-resolver.xml :

<resolver:AttributeDefinition xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
                              id="GoogleMySiteAEmail"
                              sourceAttributeID="email">
 <resolver:Dependency ref="myLDAP" />
  <resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"

 nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
</resolver:AttributeDefinition>


     <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
        ldapURL="ldap://1.2.3.4:389"
        baseDN="ou=users,o=myCompany"
        principal="cn=loginuser,ou=users,o=myCompany"
        principalCredential="mypassword">
        <dc:FilterTemplate>
            <![CDATA[
                (cn=$requestContext.principalName)
            ]]>
        </dc:FilterTemplate>
    <!--
    <ReturnAttributes>cn</ReturnAttributes>
    -->

    </resolver:DataConnector>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150119/6b553841/attachment-0001.html 


More information about the users mailing list