LDAP DataConnector BinaryAttributes definition

Daniel Fisher dfisher at vt.edu
Wed Dec 16 22:36:07 UTC 2020


On Wed, Dec 16, 2020 at 3:52 PM Joseph Fischetti <
Joseph.Fischetti at marist.edu> wrote:

> For the new configuration, I removed “LDAPProperty” and replaced it with
> “BinaryAttributes”.  It wouldn’t work until I specified  the attribute as
> ‘objectSid’ instead of ‘objectsid’.  The dataconnector *does* have
> lowercaseAttributeNames="true".  The scripted attribute resolver still
> references objectsid as lowercase:
> <InputDataConnector ref="myLDAP" attributeNames="objectsid"/>
>
> Is there a case sensitivity in BinaryAttributes that needs to be ignored
> somewhere?
>

The <BinaryAttributes/> config data needs to be an exact match on the
attribute description returned by the LDAP. (Including options if they are
present.) Note that attributes with the ";binary" option are automatically
treated as binary.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20201216/6377a218/attachment.htm>


More information about the users mailing list