LDAP Connector

[Jann Malenkoff]

Wondering if anyone can give me a prod in the right direction....

I am writing an LDAP connection (IdP3) -- the unique bit is that a user can
have multiple accounts -- all with same uid name--  but in different OUs

idp.attribute.resolver.LDAP.entire.baseDN goes across the whole of the LDAP

Can I use mergeResults to get the combined 'memberOf' from same uid name--
but from all the different OUs?

The search below only gets it from 1 of the OU (but not the others) -- so I
am not sure if my assumption on mergeResults is correct?

Thank you.


 <resolver:DataConnector id="LDAPCONN" xsi:type="dc:LDAPDirectory"
                ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
                baseDN="%{idp.attribute.resolver.LDAP.entire.baseDN}"
                principal="%{idp.attribute.resolver.LDAP.bindDN}"

principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
                useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS}"

connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"

responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"
                mergeResults="true">
                <resolver:FailoverDataConnector
ref="LDAPCONN-staticfailoverconnector" />
                <dc:FilterTemplate>
                    <![CDATA[
                        (uid=$requestContext.principalName)
                    ]]>
                </dc:FilterTemplate>
                <dc:ReturnAttributes>memberOf</dc:ReturnAttributes>
                <dc:ConnectionPool
                    minPoolSize="%{idp.pool.LDAP.minSize}"
                    maxPoolSize="%{idp.pool.LDAP.maxSize}"
                    blockWaitTime="%{idp.pool.LDAP.blockWaitTime}"

validatePeriodically="%{idp.pool.LDAP.validatePeriodically}"
                    validateTimerPeriod="%{idp.pool.LDAP.validatePeriod}"
                    expirationTime="%{idp.pool.LDAP.idleTime}"

failFastInitialize="%{idp.pool.LDAP.failFastInitialize}" />
          </resolver:DataConnector>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170623/7fb65e87/attachment.html>