Using x509 login data in ldap data connector

Juergen Schulz Juergen.Schulz at gmx.de
Mon Nov 28 08:29:06 EST 2016


Dear all,

We are using shibboleth3 with x509 login. The login itself looks fine, 
but now we would like to get the certificate serial number with CA or at 
least the DN of the certificate for the ldap search.
Does anyone know, how to access

mail certificateNumber certificateAuthority

in the 'LdapDirectory' DataConnector:

<resolver:DataConnector id="fhgDirectory"
                 xsi:type="dc:LDAPDirectory"
                 xmlns="urn:mace:shibboleth:2.0:resolver:dc"
                 ldapURL="ldaps://foobar"
                 baseDN="o=foo,c=de"
                 principal="foo"
                 principalCredential="foopass">
       <FilterTemplate>
         <![CDATA[
          =$resolutionContext.<ATTRIBUTE_FOR_MAIL>
       </FilterTemplate>

Is there a way to somehow display the $resolutionContext?

Kind regards
Juergen


More information about the users mailing list