Data Connector Depending on Attributes

Nate Klingenstein nate.klingenstein at utah.edu
Mon Feb 1 22:01:23 EST 2016


All,

I’ve got a use case where I need to execute a query against an LDAP directory data connector using the results acquired from a prior query to another system.  I’m screwing up the wiring, apparently.

As far as I’m aware, the employee number is being populated as UID successfully by the first query, but it’s the rest of the mechanics that aren’t working.  Here’s what I’m trying:

   <resolver:AttributeDefinition xsi:type="ad:Simple" id=“firstdotlast" sourceAttributeID=“firstdotlast">
       <resolver:Dependency ref=“OpenDJ" />
       <resolver:AttributeEncoder xsi:type="enc:SAML2String" name=“https://example.org/attributes/firstdotlast" friendlyName=“First.Last" encodeType="false" />
   </resolver:AttributeDefinition>

   <resolver:DataConnector id=“OpenDJ" xsi:type="dc:LDAPDirectory"
       ldapURL="ldaps://ldap.example.org:636"
       baseDN=“ou=people,dc=example,dc=org"
       principal=“authoritativeDN"
       principalCredential="authoritativeDNpasswd"
       useStartTLS="false”>
   
   <resolver:Dependency id=“otherLDAP” />
   
       <dc:FilterTemplate>
           <![CDATA[
              employeeNumber=${uid}
           ]]>
       </dc:FilterTemplate>
   </resolver:DataConnector>

Does anyone see an obvious mistake?

As an aside, I presume horrible things happen if both data sources use the same field for different things and I don’t filter the results.

Thanks,
Nate.


More information about the users mailing list