Request to add support for Dynamic Base in LDAP Connector

[Wessel, Keith]

It's not trivial, but couldn't one use the SpringResourcesRef attribute on the LDAP data connector to point to a bean that dynamically sets the search base as part of the SearchExecutor? Even if this would work, question is: would attributes from other data connectors be available to this bean? In this case, if you want to make the search base be the entry of the user who just authenticated, you'd need the principal name of that user to build the search base.

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott via users
Sent: Wednesday, July 27, 2022 1:45 PM
To: Shib Users <users at shibboleth.net>
Cc: Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: Request to add support for Dynamic Base in LDAP Connector

Requests for features go to Jira, like bug reports, etc.

It is true that the baseDN isn't templated, unlike the search filter and so on, so yes, it's a gap. I do not know if it's a fixable one, as I suspect perhaps the base DN may be part of the pool configuration and so not possible to make dynamic given the library used, so it's possible it's not a feature we can implement without changes to ldaptive.

-- Scott
 

-- 
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!DZ3fjg!-KoLRwrrtGcGRR9hxhAHciNagJ6bRpwlumoP5PpqD43fzjFxKLtx1hCVN-tzOGZxuCyutUHzbL7xJ8Y-2dsA$ 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net