Thanks, but obviously I read this page of the documentation.<div>I read also the java source of the dataconnector : and I've seen it doesn't accept variables in baseDN.<br>
So How can I do ?<br><br><div class="gmail_quote">On Fri, Dec 16, 2011 at 16:38, Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Here you go, first hit if you had search for "ldap data connector":<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector</a><br>
<div class="HOEnZb"><div class="h5"><br>
<br>
On Fri, Dec 16, 2011 at 10:33, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
> I don't find this doc, I just tried to imagine a solution, but it doesn't<br>
> work : the ${requestContext.principalName} is not replaced by its value.<br>
> Could you please send me the doc URL where it is explained ?<br>
><br>
> What I want is to select a subentry in my ldap, which depends on the<br>
> principalName.<br>
><br>
> Thanks a lot<br>
><br>
><br>
><br>
> On Fri, Dec 16, 2011 at 16:27, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>><br>
>> You haven't said what you actually want to do. The example you showed<br>
>> filled in your user ID into a string. That's what the example in the<br>
>> docs show to. So yes, you can do that.<br>
>><br>
>> On Fri, Dec 16, 2011 at 10:23, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> > I did it, but without success.<br>
>> > Has someone done it before ?<br>
>> ><br>
>> ><br>
>> > On Fri, Dec 16, 2011 at 16:06, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>> >><br>
>> >> Refer to the documentation for what the template language supports.<br>
>> >><br>
>> >> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> >> > Hi everybody<br>
>> >> ><br>
>> >> > I work with the latest version of Shibboleth.<br>
>> >> ><br>
>> >> > I would like to configure my LDAP Dataconnector with a dynamic baseDN<br>
>> >> > which<br>
>> >> > depends on the result of the principalName.<br>
>> >> > For example, here is my (bad) DataConnector:<br>
>> >> ><br>
>> >> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"<br>
>> >> > ldapURL="ldap://localhost:389"<br>
>> >> > baseDN="cn=${requestContext.principalName}, ou=users,<br>
>> >> > ou=mycompany,<br>
>> >> > c=com"<br>
>> >> > principal="cn=Directory Manager"<br>
>> >> > principalCredential="************"<br>
>> >> > searchScope="ONELEVEL"><br>
>> >> > <dc:FilterTemplate><br>
>> >> > <![CDATA[<br>
>> >> > (cn=*)<br>
>> >> > ]]><br>
>> >> > </dc:FilterTemplate><br>
>> >> > <dc:ReturnAttributes>cn</dc:ReturnAttributes><br>
>> >> > </resolver:DataConnector><br>
>> >> ><br>
>> >> > If I authenticate with my own credentials (id=talbain), I should find<br>
>> >> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com<br>
>> >> > It doesn't work, but how can I proceed to succeed ?<br>
>> >> ><br>
>> >> > Thanks a lot<br>
>> >> ><br>
>> >> > Thierry ALBAIN<br>
>> >> ><br>
>> >> ><br>
>> >> > --<br>
>> >> > To unsubscribe from this list send an email to<br>
>> >> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> >><br>
>> >><br>
>> >><br>
>> >> --<br>
>> >> Chad La Joie<br>
>> >> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> >> trusted identities, delivered<br>
>> >> --<br>
>> >> To unsubscribe from this list send an email to<br>
>> >> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> ><br>
>> ><br>
>> ><br>
>> > --<br>
>> > To unsubscribe from this list send an email to<br>
>> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>><br>
>><br>
>><br>
>> --<br>
>> Chad La Joie<br>
>> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> trusted identities, delivered<br>
>> --<br>
>> To unsubscribe from this list send an email to<br>
>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
><br>
><br>
><br>
> --<br>
> To unsubscribe from this list send an email to<br>
> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
<br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>