I found my solution in ldap filter.<div>Here is the good data connector :</div><div><br></div><div><div style><font color="#000099"><resolver:DataConnector id="openDJ" xsi:type="dc:LDAPDirectory"</font></div>
<div style><font color="#000099"> ldapURL="ldap://localhost:389"</font></div><div style><font color="#000099"> <b>baseDN</b>="ou=users, ou=mycompany, c=com"</font></div><div style><font color="#000099"> principal="cn=Directory Manager"</font></div>
<div style><font color="#000099"> principalCredential="************"</font></div><div style><font color="#000099"> searchScope="<b>SUBTREE</b>"></font></div><div style><font color="#000099"> <dc:FilterTemplate></font></div>
<div style><font color="#000099"> <![CDATA[</font></div><div style><font color="#000099"> (&(objectClass=theGoodOne)(cn:dn:=$<b>requestContext.principalName</b>))</font></div><div style><font color="#000099"> ]]></font></div>
<div style><font color="#000099"> </dc:FilterTemplate></font></div><div style><font color="#000099"> <dc:ReturnAttributes>cn</dc:ReturnAttributes></font></div><div style><font color="#000099"></resolver:DataConnector></font></div>
<div><br></div>Actually, It just needs to have a cn attribute in the dn that matches with the login of the principal.</div><div><br class="Apple-interchange-newline">Regards,<br><br>Thierry ALBAIN<br><br>
<br><br><div class="gmail_quote">On Fri, Dec 16, 2011 at 17:22, Thierry Albain <span dir="ltr"><<a href="mailto:talbain@sqli.com">talbain@sqli.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
OK, Thanks a lot Chad.<div>I understand it's more a ldap question than a Shibboleth one.</div><div>Best regards,</div><div><span class="HOEnZb"><font color="#888888">Thierry ALBAIN</font></span><div><div class="h5"><br>
<br><div class="gmail_quote">On Fri, Dec 16, 2011 at 17:19, Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz" target="_blank">lajoie@itumi.biz</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Set the base DN to whatever is appropriate for your LDAP server and<br>
then use an appropriate search filter.<br>
<div><br>
On Fri, Dec 16, 2011 at 11:13, Thierry Albain <<a href="mailto:talbain@sqli.com" target="_blank">talbain@sqli.com</a>> wrote:<br>
> Ok, we have the same conclusions.<br>
> So, do you know if there is another way to obtain what I want ?<br>
<br>
</div><div><div>--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div>