Search filter script

John Morrison john.morrison at
Tue May 3 04:03:30 EDT 2016

On Tue, 2016-05-03 at 00:22 +0200, Peter Schober wrote:
> * John Morrison <john.morrison at> [2016-05-03 00:13]:
> > We have a tricky data model in our LDAP structure, arranged in
> > different DN:s based on how many departments an employee is working
> > in. We search out all departments based on their employee number
> > returning multiple DN:s
> Just how do your other applications (incl COTS) and services handle
> that case? They won't all offer methods the Shibboleth IDP does,
> including scripting?  Seems to me adding an abstraction layer (or
> additional processing steps, possibly flattening some of thoe
> structures in form of LDAP attributes) would be in order, simplyfying
> all other application integrations as well.
> > this worked OK in IDPv2 but not in V3.
> What Java versions are you using with v2 vs. v3 and what scripting
> engine (Rhino vs. Nashorn)?

Was using v2 with Java 7 before and now v3 with Java 8.


> -peter

More information about the users mailing list