The baseDN depends on who authenticates.<div>I cannot write a data connector by user in my ldap : too much users !<br>Hum, I'm not sure I've understood your questions.<br><br><div class="gmail_quote">On Fri, Dec 16, 2011 at 16:50, Tom Zeller <span dir="ltr"><<a href="mailto:tzeller@unicon.net">tzeller@unicon.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">How dynamic is the baseDN ? i.e. How many different baseDNs do you<br>
anticipate ? Would multiple ldap data connectors work ?<br>
<div class="HOEnZb"><div class="h5"><br>
On Fri, Dec 16, 2011 at 9:45 AM, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
> Thanks, but obviously I read this page of the documentation.<br>
> I read also the java source of the dataconnector : and I've seen it doesn't<br>
> accept variables in baseDN.<br>
> So How can I do ?<br>
><br>
><br>
> On Fri, Dec 16, 2011 at 16:38, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>><br>
>> Here you go, first hit if you had search for "ldap data connector":<br>
>><br>
>> <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector</a><br>
>><br>
>><br>
>> On Fri, Dec 16, 2011 at 10:33, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> > I don't find this doc, I just tried to imagine a solution, but it<br>
>> > doesn't<br>
>> > work : the ${requestContext.principalName} is not replaced by its<br>
>> > value.<br>
>> > Could you please send me the doc URL where it is explained ?<br>
>> ><br>
>> > What I want is to select a subentry in my ldap, which depends on the<br>
>> > principalName.<br>
>> ><br>
>> > Thanks a lot<br>
>> ><br>
>> ><br>
>> ><br>
>> > On Fri, Dec 16, 2011 at 16:27, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>> >><br>
>> >> You haven't said what you actually want to do. The example you showed<br>
>> >> filled in your user ID into a string. That's what the example in the<br>
>> >> docs show to. So yes, you can do that.<br>
>> >><br>
>> >> On Fri, Dec 16, 2011 at 10:23, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> >> > I did it, but without success.<br>
>> >> > Has someone done it before ?<br>
>> >> ><br>
>> >> ><br>
>> >> > On Fri, Dec 16, 2011 at 16:06, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>> >> >><br>
>> >> >> Refer to the documentation for what the template language supports.<br>
>> >> >><br>
>> >> >> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>><br>
>> >> >> wrote:<br>
>> >> >> > Hi everybody<br>
>> >> >> ><br>
>> >> >> > I work with the latest version of Shibboleth.<br>
>> >> >> ><br>
>> >> >> > I would like to configure my LDAP Dataconnector with a dynamic<br>
>> >> >> > baseDN<br>
>> >> >> > which<br>
>> >> >> > depends on the result of the principalName.<br>
>> >> >> > For example, here is my (bad) DataConnector:<br>
>> >> >> ><br>
>> >> >> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"<br>
>> >> >> > ldapURL="ldap://localhost:389"<br>
>> >> >> > baseDN="cn=${requestContext.principalName}, ou=users,<br>
>> >> >> > ou=mycompany,<br>
>> >> >> > c=com"<br>
>> >> >> > principal="cn=Directory Manager"<br>
>> >> >> > principalCredential="************"<br>
>> >> >> > searchScope="ONELEVEL"><br>
>> >> >> > <dc:FilterTemplate><br>
>> >> >> > <![CDATA[<br>
>> >> >> > (cn=*)<br>
>> >> >> > ]]><br>
>> >> >> > </dc:FilterTemplate><br>
>> >> >> > <dc:ReturnAttributes>cn</dc:ReturnAttributes><br>
>> >> >> > </resolver:DataConnector><br>
>> >> >> ><br>
>> >> >> > If I authenticate with my own credentials (id=talbain), I should<br>
>> >> >> > find<br>
>> >> >> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com<br>
>> >> >> > It doesn't work, but how can I proceed to succeed ?<br>
>> >> >> ><br>
>> >> >> > Thanks a lot<br>
>> >> >> ><br>
>> >> >> > Thierry ALBAIN<br>
>> >> >> ><br>
>> >> >> ><br>
>> >> >> > --<br>
>> >> >> > To unsubscribe from this list send an email to<br>
>> >> >> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> >> >><br>
>> >> >><br>
>> >> >><br>
>> >> >> --<br>
>> >> >> Chad La Joie<br>
>> >> >> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> >> >> trusted identities, delivered<br>
>> >> >> --<br>
>> >> >> To unsubscribe from this list send an email to<br>
>> >> >> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> >> ><br>
>> >> ><br>
>> >> ><br>
>> >> > --<br>
>> >> > To unsubscribe from this list send an email to<br>
>> >> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> >><br>
>> >><br>
>> >><br>
>> >> --<br>
>> >> Chad La Joie<br>
>> >> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> >> trusted identities, delivered<br>
>> >> --<br>
>> >> To unsubscribe from this list send an email to<br>
>> >> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>> ><br>
>> ><br>
>> ><br>
>> > --<br>
>> > To unsubscribe from this list send an email to<br>
>> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>><br>
>><br>
>><br>
>> --<br>
>> Chad La Joie<br>
>> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>> trusted identities, delivered<br>
>> --<br>
>> To unsubscribe from this list send an email to<br>
>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
><br>
><br>
><br>
> --<br>
> To unsubscribe from this list send an email to<br>
> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>