Scoped attributes and multiple DataConnectors

eheiner eheiner at whatcom.ctc.edu
Wed Jul 29 18:28:27 EDT 2015


I'm trying to set up an attribute to work with multiple DataConnectors. My
DataConnectors are as follows (leaving out the sensitive information):

    <resolver:DataConnector id="myLDAP" xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc" 
        useStartTLS="false"
        <FilterTemplate>
            
        </FilterTemplate>

        
        <LDAPProperty name="java.naming.ldap.attributes.binary"
value="objectSid"/>
        
        <LDAPProperty name="java.naming.referral" value="follow"/>

    </resolver:DataConnector>

    <resolver:DataConnector id="wccLDAP" xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc" 
        useStartTLS="false"
        <FilterTemplate>
            
        </FilterTemplate>

        
        <LDAPProperty name="java.naming.ldap.attributes.binary"
value="objectSid"/>
        
        <LDAPProperty name="java.naming.referral" value="follow"/>

    </resolver:DataConnector>

I'm trying to get the following attribute to work on both myLDAP and
wccLDAP. It is a scoped attribute, which seems to be the only way to get it
to work in the first place (I'm a novice with Shibboleth).

	<resolver:AttributeDefinition xsi:type="ad:Scoped"
id="eduPersonPrincipalName" scope="orca.whatcom.ctc.edu"
sourceAttributeID="employeeID">
        <resolver:Dependency ref="myLDAP" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString"
name="urn:mace:dir:attribute-def:eduPersonPrincipalName" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString"
name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
friendlyName="eduPersonPrincipalName" />
    </resolver:AttributeDefinition>

How can I duplicate this attribute to work with the other domain/scope?



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Scoped-attributes-and-multiple-DataConnectors-tp7617723.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list