Other ways to transform binary LDAP balues?

[Matthew X. Economou]

>>>>> "SC" == Cantor, Scott <cantor.2 at osu.edu> writes:

    SC> I don't how the IdP handles binary data internally if at all,

Without the LDAPProperty element, the IdP passes the binary data back
through to the relying party verbatim.  The ePPN it constructed looked
like something out of the Nezperdian hive-mind of chaos. :)

>>>>> "DF" == Daniel Fisher <dfisher at vt.edu> writes:

    DF> As Scott said, the quickest solution would be to go the
    DF> scripting route.

By scripting, do you and Scott mean "Scripted Attribute Definition"
(https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition)?

    DF> It's possible to configure the LDAP DataConnector to give you
    DF> this attribute in the form you want, but that will require using
    DF> a spring resources based configuration.

If possible would you point me at any examples?  I found "Developing
Attribute Resolver Extensions"
(https://wiki.shibboleth.net/confluence/display/IDP30/Developing+Attribute+Resolver+Extensions).

Best wishes,
Matthew

-- 
"The lyf so short, the craft so longe to lerne."