Problem sending email address as NameID in subject
Andrew Cheung
acheung at brookfieldres.com
Mon Jan 19 16:29:27 EST 2015
Hi. I have problems sending the email address as NameID in the subject. (I
use Novell eDirectory as the datastore and access it using LDAP).
Any help is appreciated.
Here is my configuration :
Shibboleth version : 2.4.3
attribute-filter.xml :
<afp:AttributeFilterPolicy id="releaseGoogleMySiteAEmail">
<afp:PolicyRequirementRule xsi:type="basic:NOT">
<basic:Rule xsi:type="basic:AttributeRequesterString" value="
https://google.com/a/dev.mysiteA.ca"/>
</afp:PolicyRequirementRule>
<afp:AttributeRule attributeID="GoogleMySiteAEmail">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
</afp:AttributeFilterPolicy>
-----------------
attribute-resolver.xml :
<resolver:AttributeDefinition xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
id="GoogleMySiteAEmail"
sourceAttributeID="email">
<resolver:Dependency ref="myLDAP" />
<resolver:AttributeEncoder xsi:type="SAML2StringNameID"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
nameFormat="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" />
</resolver:AttributeDefinition>
<resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
ldapURL="ldap://1.2.3.4:389"
baseDN="ou=users,o=myCompany"
principal="cn=loginuser,ou=users,o=myCompany"
principalCredential="mypassword">
<dc:FilterTemplate>
<![CDATA[
(cn=$requestContext.principalName)
]]>
</dc:FilterTemplate>
<!--
<ReturnAttributes>cn</ReturnAttributes>
-->
</resolver:DataConnector>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150119/6b553841/attachment-0001.html
More information about the users
mailing list