<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CCB8B7.43F271B0">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:DisplayBackgroundShape/>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-ansi-font-size:14.0pt;
mso-bidi-font-size:14.0pt;
font-family:"Times New Roman";
mso-ascii-font-family:"Times New Roman";
mso-hansi-font-family:"Times New Roman";
mso-bidi-font-family:"Times New Roman";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none;
text-underline:none;
text-decoration:none;
text-line-through:none;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Hi, have a problem accessing LDAP and reading 2 <span class=SpellE>OUs</span>
in parallel trees.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I thought the Shib wiki said to use two dependencies from each
attribute to the data connectors.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>This causes both <span class=SpellE>OUs</span> to be read from <span
class=SpellE>ldap</span>.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>Example:<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><<span
class=SpellE>resolver<span class=GramE>:AttributeDefinition</span></span> <span
class=SpellE>xsi:type</span>="<span class=SpellE>ad:Simple</span>"
id="<span class=SpellE>samaccountname</span>"<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:2.0in'><span class=SpellE><span
class=GramE><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>sourceAttributeID</span></font></span></span><font
size=4 color=blue><span style='font-size:14.0pt;color:blue'>="<span
class=SpellE>sAMAccountName</span>" <span
style='mso-spacerun:yes'> </span><span
class=SpellE>xmlns</span>="urn:mace:shibboleth:2.0:resolver:ad"><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><<span
class=SpellE>resolver<span class=GramE>:Dependency</span></span> ref="<span
class=SpellE>myLDAP</span>" /><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><<span
class=SpellE>resolver<span class=GramE>:Dependency</span></span>
ref="my2LDAP" /><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><<span
class=SpellE>resolver<span class=GramE>:AttributeEncoder</span></span> <span
class=SpellE>xsi:type</span>="enc:SAML1String" <o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-left:1.5in;text-indent:.5in'><span
class=GramE><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'>name</span></font></span><font size=4
color=blue><span style='font-size:14.0pt;color:blue'>="<span class=SpellE>urn:mace:dir:attribute-def:sAMAccountName</span>"
/><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'><<span
class=SpellE>resolver<span class=GramE>:AttributeEncoder</span></span> <span
class=SpellE>xsi:type</span>="enc:SAML2String"
name="urn:oid:1.2.840.113556.1.4.221" <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 color=blue face="Times New Roman"><span
style='font-size:14.0pt;color:blue'><span
style='mso-spacerun:yes'>
</span><span
style='mso-spacerun:yes'> </span><span
class=SpellE><span class=GramE>friendlyName</span></span>="<span
class=SpellE>sAMAccountName</span>" /><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 color=blue
face="Times New Roman"><span style='font-size:14.0pt;color:blue'></<span
class=SpellE>resolver<span class=GramE>:AttributeDefinition</span></span>><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-indent:.5in'><font size=4 face="Times New Roman"><span
style='font-size:14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>It works if the user is found in the 2<sup>nd</sup> data connectors OU.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>If the user is found in the 1<sup>st</sup> data connector’s OU, I
get an error from the 2<sup>nd</sup> data connector, and no attributes are
returned to the SP.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>I am required by security to use https, port 636.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'>Is there a better way to do this?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
14.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><st1:PersonName w:st="on"><em><i><font size=4
face="Times New Roman"><span style='font-size:13.5pt;mso-no-proof:yes'>Leonard
Kroll</span></font></i></em></st1:PersonName><i><font size=4 color=blue><span
style='font-size:13.5pt;color:blue;font-style:italic;mso-no-proof:yes'><br>
</span></font></i><em><i><font size=4 face="Times New Roman"><span
style='font-size:13.5pt;mso-no-proof:yes'>UNIX / GIS Administrator</span></font></i></em><i><font
size=4 color=blue><span style='font-size:13.5pt;color:blue;font-style:italic;
mso-no-proof:yes'><br>
</span></font><em><i><font face="Times New Roman"><span style='mso-no-proof:
yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State> <st1:City w:st="on"><st1:place
w:st="on">Boston</st1:place></st1:City></span></font></i></em><font
color=blue><span style='color:blue;mso-no-proof:yes'><br>
</span></font></i><span style='mso-no-proof:yes'><a href="mailto:at@umb.edu"><em><i><font
color=black face="Times New Roman"><span style='color:windowtext;text-decoration:
none;text-underline:none'>Leonard(dot)Kroll(at)umb.edu</span></font></i></em></a><br>
<em><i><font face="Times New Roman">Phone: 617-287-5048</font></i></em><i><font
color=blue><span style='color:blue;font-style:italic'><br>
</span></font><em><i><font face="Times New Roman">fax:
617-287-5224</font></i></em></i></span><em><i><font color=blue
face="Times New Roman"><span style='color:blue'><o:p></o:p></span></font></i></em></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>