Two AD data connectors issue with Attribute-resolver

[Colon, Joseph]

Thanks for the info Scott,

So if I have 2 domains, AD1 and AD3.  Is there any way to return an attribute like "mail" back to the SP no matter which domain the user exists in?

Here is a part of the idp_process.log file for 2 accounts logging in, 1 from AD1 and the other from AD3:
AD3 User
2015-10-14 13:41:34,789 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:179] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'testidp at mycampus.apus.edu' succeeded
2015-10-14 13:41:54,351 - INFO [Shibboleth-Consent-Audit.SSO:241] - 20151014T174154Z|https://sp.testshib.org/shibboleth-sp|AttributeReleaseConsent|testidp@mycampus.apus.edu|eduPersonPrincipalName||true

AD1 User
2015-10-14 13:42:22,039 - INFO [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:179] - Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'jcolon at apus.edu' succeeded
2015-10-14 13:42:22,382 - INFO [net.shibboleth.idp.attribute.resolver.AbstractResolverPlugin:191] - Resolver plugin 'AD3' produced no value.

Thanks again,
Joe



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, October 14, 2015 2:54 PM
To: Shib Users
Subject: Re: Two AD data connectors issue with Attribute-resolver

On 10/14/15, 2:08 PM, "users on behalf of Colon, Joseph" <users-bounces at shibboleth.net on behalf of JColon at APUS.EDU> wrote:



>Now I am trying to set up the “attribute-resolver.xml” to return the “eduPersonPrincipalName” attribute but it only works for the last configured data connector listed in the “attribute-resolver.xml” file.

If the log isn't warning you that you're duplicating AttributeDefinitions with the same ID, that's probably a bug. The second is just overwriting the first in the configuration.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.