<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
On IDP side, I have configured login.config file to perform search of the user credentials
<br>
first in database and if not found then in LDAP. I want this setup so testing team can do automated tests again
<br>
users in database and real people can use their credentials from LDAP. This is working fine for login.<br>
The problem is in attributeResolver:<br>
<br>
In attribute-resolver.xml I have 2 DataConnectors as well - database and LDAP. My attribute definition like this:<br>
<resolver:AttributeDefinition <b>id="email"</b> xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"<br>
sourceAttributeID="mail"><br>
<resolver:Dependency ref="artstorDB" /><br>
<br>
<resolver:AttributeDefinition <b>id="myemail"</b> xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad"<br>
sourceAttributeID="mail"><br>
<resolver:Dependency ref="myLDAP" /><br>
<br>
Now, if I leave the same attribute id for both DataConnectors, I got error about duplicate attribute definition.
<br>
If I change AttributeDefinition Id to something else, as above, then email attribute is not populated of course.
<br>
08:09:22.606 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:450] - Removing attribute
<b>email</b> from resolution result for principal *****. It contains no values.<br>
<br>
<br>
How can I chain attribute definitions so if no attribute extracted from database connector it get extracted from LDAP?<br>
I did not find answer in documentation so far. <br>
Thanks<br>
<br>
<br>
<br>
<br>
</body>
</html>