Question about Scripted attribute in attribute-resolver.xml

[Cantor, Scott]

As Peter said, if I'd known you had the data in LDAP I wouldn't have said anything about it was unusual, I thought you were trying to map through /etc/groups and that the LDAP had no data in it to do the mapping for that.

Query LDAP for it. Whatever you're doing, you're just not understanding to structure your queries and properly combine things to build up what you need, and this certainly has nothing to do with, nor can it interfere with, authentication.

You probably need to build a second connector that depends on the first, and feed in an input attribute dependency to use in building the filter string.

-- Scott