I don't find this doc, I just tried to imagine a solution, but it doesn't work : the
${requestContext.principalName} is not replaced by its value.<div>Could you please send me the doc URL where it is explained ?</div><div><br></div><div>What I want is to select a subentry in my ldap, which depends on the principalName.</div>
<div><br></div><div>Thanks a lot<br>
<br><br><div class="gmail_quote">On Fri, Dec 16, 2011 at 16:27, Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
You haven't said what you actually want to do. The example you showed<br>
filled in your user ID into a string. That's what the example in the<br>
docs show to. So yes, you can do that.<br>
<div class="HOEnZb"><div class="h5"><br>
On Fri, Dec 16, 2011 at 10:23, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
> I did it, but without success.<br>
> Has someone done it before ?<br>
><br>
><br>
> On Fri, Dec 16, 2011 at 16:06, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>><br>
>> Refer to the documentation for what the template language supports.<br>
>><br>
>> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> > Hi everybody<br>
>> ><br>
>> > I work with the latest version of Shibboleth.<br>
>> ><br>
>> > I would like to configure my LDAP Dataconnector with a dynamic baseDN<br>
>> > which<br>
>> > depends on the result of the principalName.<br>
>> > For example, here is my (bad) DataConnector:<br>
>> ><br>
>> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"<br>
>> > ldapURL="ldap://localhost:389"<br>
>> > baseDN="cn=${requestContext.principalName}, ou=users,<br>
>> > ou=mycompany,<br>
>> > c=com"<br>
>> > principal="cn=Directory Manager"<br>
>> > principalCredential="************"<br>
>> > searchScope="ONELEVEL"><br>
>> > <dc:FilterTemplate><br>
>> > <![CDATA[<br>
>> > (cn=*)<br>
>> > ]]><br>
>> > </dc:FilterTemplate><br>
>> > <dc:ReturnAttributes>cn</dc:ReturnAttributes><br>
>> > </resolver:DataConnector><br>
>> ><br>
>> > If I authenticate with my own credentials (id=talbain), I should find<br>
>> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com<br>
>> > It doesn't work, but how can I proceed to succeed ?<br>
>> ><br>
>> > Thanks a lot<br>
>> ><br>
>> > Thierry ALBAIN<br>
>> ><br>
>> ><br>
>> > --<br>
>> > To unsubscribe from this list send an email to<br>
>> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>><br>
>><br>
>><br>
>> --<br>
>> Chad La Joie<br>
>> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> trusted identities, delivered<br>
>> --<br>
>> To unsubscribe from this list send an email to<br>
>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
><br>
><br>
><br>
> --<br>
> To unsubscribe from this list send an email to<br>
> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
<br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>