Question about Scripted attribute in attribute-resolver.xml

[Peter Schober]

Emilie Boulard <boulard at cines.fr> [2024-03-01 10:31 CET]:
> I did initially though of using a secondary DN in the
> ldap.properties so i could access to the right ldap attribute in the
> correct OU.

FYI, you don't have to use properties for anything.  Those just allow
you to keep some information outside of the XML if you wanted.

> But when trying that i realised it was impacting authentification
> and that's not what i want. Our users must identify whith their ldap
> login.

You can add multiple LDAP DataConnectors and doing should NOT affect
authentication. Seems to me that fixing whatever you've done here
should avoid any of the highly complex things you were speculating
about (looking up system groups, running local executables from Java,
etc.)

As CINES is a member of Fédération Éducation-Recherche I would suggest
talking to RENATER.fr about your situation and what you're trying to
achieve.

Best regards,
-peter