It doesn't work : I tried it without success.<div>The entryDN of my subentry is : cn=subentry, cn=myuser,ou=users... and not only the principalName<br clear="all">
<br><div class="gmail_quote">On Fri, Dec 16, 2011 at 16:53, Tom Zeller <span dir="ltr"><<a href="mailto:tzeller@unicon.net">tzeller@unicon.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Oh, too early. Maybe you want :<br>
<br>
<FilterTemplate><br>
<![CDATA[<br>
(entryDN=${requestContext.principalName})<br>
]]><br>
</FilterTemplate><br>
<div class="HOEnZb"><div class="h5"><br>
On Fri, Dec 16, 2011 at 9:50 AM, Tom Zeller <<a href="mailto:tzeller@unicon.net">tzeller@unicon.net</a>> wrote:<br>
> How dynamic is the baseDN ? i.e. How many different baseDNs do you<br>
> anticipate ? Would multiple ldap data connectors work ?<br>
><br>
> On Fri, Dec 16, 2011 at 9:45 AM, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>> Thanks, but obviously I read this page of the documentation.<br>
>> I read also the java source of the dataconnector : and I've seen it doesn't<br>
>> accept variables in baseDN.<br>
>> So How can I do ?<br>
>><br>
>><br>
>> On Fri, Dec 16, 2011 at 16:38, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>>><br>
>>> Here you go, first hit if you had search for "ldap data connector":<br>
>>><br>
>>> <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector</a><br>
>>><br>
>>><br>
>>> On Fri, Dec 16, 2011 at 10:33, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>>> > I don't find this doc, I just tried to imagine a solution, but it<br>
>>> > doesn't<br>
>>> > work : the ${requestContext.principalName} is not replaced by its<br>
>>> > value.<br>
>>> > Could you please send me the doc URL where it is explained ?<br>
>>> ><br>
>>> > What I want is to select a subentry in my ldap, which depends on the<br>
>>> > principalName.<br>
>>> ><br>
>>> > Thanks a lot<br>
>>> ><br>
>>> ><br>
>>> ><br>
>>> > On Fri, Dec 16, 2011 at 16:27, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>>> >><br>
>>> >> You haven't said what you actually want to do. The example you showed<br>
>>> >> filled in your user ID into a string. That's what the example in the<br>
>>> >> docs show to. So yes, you can do that.<br>
>>> >><br>
>>> >> On Fri, Dec 16, 2011 at 10:23, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>> wrote:<br>
>>> >> > I did it, but without success.<br>
>>> >> > Has someone done it before ?<br>
>>> >> ><br>
>>> >> ><br>
>>> >> > On Fri, Dec 16, 2011 at 16:06, Chad La Joie <<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>> wrote:<br>
>>> >> >><br>
>>> >> >> Refer to the documentation for what the template language supports.<br>
>>> >> >><br>
>>> >> >> On Fri, Dec 16, 2011 at 09:57, Thierry Albain <<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>><br>
>>> >> >> wrote:<br>
>>> >> >> > Hi everybody<br>
>>> >> >> ><br>
>>> >> >> > I work with the latest version of Shibboleth.<br>
>>> >> >> ><br>
>>> >> >> > I would like to configure my LDAP Dataconnector with a dynamic<br>
>>> >> >> > baseDN<br>
>>> >> >> > which<br>
>>> >> >> > depends on the result of the principalName.<br>
>>> >> >> > For example, here is my (bad) DataConnector:<br>
>>> >> >> ><br>
>>> >> >> > <resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"<br>
>>> >> >> > ldapURL="ldap://localhost:389"<br>
>>> >> >> > baseDN="cn=${requestContext.principalName}, ou=users,<br>
>>> >> >> > ou=mycompany,<br>
>>> >> >> > c=com"<br>
>>> >> >> > principal="cn=Directory Manager"<br>
>>> >> >> > principalCredential="************"<br>
>>> >> >> > searchScope="ONELEVEL"><br>
>>> >> >> > <dc:FilterTemplate><br>
>>> >> >> > <![CDATA[<br>
>>> >> >> > (cn=*)<br>
>>> >> >> > ]]><br>
>>> >> >> > </dc:FilterTemplate><br>
>>> >> >> > <dc:ReturnAttributes>cn</dc:ReturnAttributes><br>
>>> >> >> > </resolver:DataConnector><br>
>>> >> >> ><br>
>>> >> >> > If I authenticate with my own credentials (id=talbain), I should<br>
>>> >> >> > find<br>
>>> >> >> > entries like this : cn=xxx,cn=talbain,ou=users,ou=mycompany,c=com<br>
>>> >> >> > It doesn't work, but how can I proceed to succeed ?<br>
>>> >> >> ><br>
>>> >> >> > Thanks a lot<br>
>>> >> >> ><br>
>>> >> >> > Thierry ALBAIN<br>
>>> >> >> ><br>
>>> >> >> ><br>
>>> >> >> > --<br>
>>> >> >> > To unsubscribe from this list send an email to<br>
>>> >> >> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>>> >> >><br>
>>> >> >><br>
>>> >> >><br>
>>> >> >> --<br>
>>> >> >> Chad La Joie<br>
>>> >> >> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>>> >> >> trusted identities, delivered<br>
>>> >> >> --<br>
>>> >> >> To unsubscribe from this list send an email to<br>
>>> >> >> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>>> >> ><br>
>>> >> ><br>
>>> >> ><br>
>>> >> > --<br>
>>> >> > To unsubscribe from this list send an email to<br>
>>> >> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>>> >><br>
>>> >><br>
>>> >><br>
>>> >> --<br>
>>> >> Chad La Joie<br>
>>> >> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>>> >> trusted identities, delivered<br>
>>> >> --<br>
>>> >> To unsubscribe from this list send an email to<br>
>>> >> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>>> ><br>
>>> ><br>
>>> ><br>
>>> > --<br>
>>> > To unsubscribe from this list send an email to<br>
>>> > <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>>><br>
>>><br>
>>><br>
>>> --<br>
>>> Chad La Joie<br>
>>> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
>>> trusted identities, delivered<br>
>>> --<br>
>>> To unsubscribe from this list send an email to<br>
>>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
>><br>
>><br>
>><br>
>> --<br>
>> To unsubscribe from this list send an email to<br>
>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>