one AD dataconnector - many base DNs

Vignesh, Vanna G. vignesh at musc.edu
Thu Oct 1 09:23:07 EDT 2015


In attribute resolver, I have one active directory dataconnector. How can I use multiple baseDNs to the same data connector? I have multiple baseDN in login.config but I am not sure how to do that in attribute-resilver.xml

  <resolver:DataConnector id="myAD" xsi:type="LDAPDirectory"
        xmlns="urn:mace:shibboleth:2.0:resolver:dc"
        ldapURL="*****"
        baseDN="*******"
        principal="*****"
        principalCredential="****">

        <FilterTemplate>
            <![CDATA[
                (sAMAccountName=$requestContext.principalName)
            ]]>
        </FilterTemplate>
        <dc:ReturnAttributes>*</dc:ReturnAttributes>
       <LDAPProperty name="com.sun.jndi.ldap.connect.timeout" value="500"/>
    </resolver:DataConnector>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151001/22770ab7/attachment-0001.html>


More information about the users mailing list