Anyone have a custom data connector for resolving tokenGroups from AD?

[IAM David Bantz]

https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples

David Bantz
U Alaska

On Thu, Aug 24, 2017 at 11:05 AM, Wessel, Keith <kwessel at illinois.edu>
wrote:

> Hi, all,
>
> We've recently started receiving more requests to be able to not only
> expose our users' direct group memberships in AD groups through attributes
> in our IdP, but also indirect group memberships.
>
> I've so far resisted, not having the time to write a custom data connector
> that would query tokenGroups, decode each SID returned, then query each
> decoded SID to retrieven the group's DN. It's not a lot of work, but it
> hasn't been a priority.
>
> Does anyone have a data connector they've written to do this that they
> might want to contribute to the community? Or other suggestions on how to
> do this? I've considered Grouper's data connector, but since we don't ever
> plan to have all AD groups in Grouper, that won't be a complete list.
>
> Thanks,
> Keith
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170824/51b01393/attachment.html>