Using x509 login data in ldap data connector

[Rod Widdowson]

> Is there a way to somehow display the $resolutionContext?

You might try setting logging for "net.shibboleth.idp.attribute.resolver.dc" to TRACE.  The LDAP connector is certainly quite wordy
and it seems to me that it does dump out the contents of the resolution context at TRACE.

https://wiki.shibboleth.net/confluence/display/IDP30/X509AuthnConfiguration indicates that if you do some Subject Canonicalization
you will be able to populate resolverContext.principal with what you need.

Rod