Using x509 login data in ldap data connector
Juergen Schulz
Juergen.Schulz at gmx.de
Mon Nov 28 08:29:06 EST 2016
Dear all,
We are using shibboleth3 with x509 login. The login itself looks fine,
but now we would like to get the certificate serial number with CA or at
least the DN of the certificate for the ldap search.
Does anyone know, how to access
mail certificateNumber certificateAuthority
in the 'LdapDirectory' DataConnector:
<resolver:DataConnector id="fhgDirectory"
xsi:type="dc:LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc"
ldapURL="ldaps://foobar"
baseDN="o=foo,c=de"
principal="foo"
principalCredential="foopass">
<FilterTemplate>
<![CDATA[
=$resolutionContext.<ATTRIBUTE_FOR_MAIL>
</FilterTemplate>
Is there a way to somehow display the $resolutionContext?
Kind regards
Juergen
More information about the users
mailing list