idpv3 ldap config question..

[Cantor, Scott]

On 3/18/15, 10:01 AM, "Liam Hoekenga" <liamr at umich.edu> wrote:
>
>The default ldap.config doesn't include an entry for idp.attribute.resolver.LDAP.returnAttributes, but both attribute-resolver-full.xml and attribute-resolver-ldap.xml pull all of their LDAP information from ldap.properties except for the return attributes. It didn't unreasonable to try and pull that information from the properties file as well.

Same question came in from TUAKIRI in Jira, so I added a warning note to the property file explaining that it isn't meant for that (and as I noted, it doesn't really make any sense to share one property).

>I guess that issue isn't so much requesting that the same attributes be retrieved by the authenticator and the resolver, but that the return attributes for the resolver cannot be placed in the properties file.  Every format I've tried for the resolver has failed...

I think it has to do with the order of evaluation in Spring, but I haven't tested it. It is what it is, and ultimately if it can made to work, that's fine, if not, it just ain't a big deal to me.

Properties are really not meant to capture settings that are not shared and are in a user config file. That's not the idea. They're for sharing settings across multiple files or for plugging values into the system config files so that we can enforce the no access rule for those files.

-- Scott