<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Wed, 12 Jun 2013, at 08:43 , Farrukh Najmi <<a href="mailto:farrukh@wellfleetsoftware.com">farrukh@wellfleetsoftware.com</a>> wrote:</div><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000"><ul><li>What does the FilterTemplate in the following mean (it is from
the thread referenced above)?<br>
<br>
<resolver:DataConnector id="ldapGroups"
xsi:type="LDAPDirectory"<br><p>...<br>
<FilterTemplate><br>
<![CDATA[<br>
(&(objectclass=<wbr>rfc822mailgroup)(member=uid=$<wbr>requestContext.principalName,<wbr>ou=people,dc=example,dc=edu))<br>
]]><br>
</FilterTemplate><br></p></li></ul></div></blockquote><div><br></div><div>describes how to look up the principal in your LDAP Directory given what the end-user has entered; </div><div>in this case limiting to particular object class in the LDAP Directory and looking to match the end-user input</div><div>to member or uid of a record in ou=people… tree.</div><div><br></div><div>Your own merely specifies what attribute to match to to the end-user input:</div><div><br></div><div></div><blockquote type="cite"></blockquote><blockquote type="cite"><div><span style="background-color: rgb(255, 255, 255); "> <dc:FilterTemplate></span><br style="background-color: rgb(255, 255, 255); "><span style="background-color: rgb(255, 255, 255); "> <![CDATA[</span><br style="background-color: rgb(255, 255, 255); "><span style="background-color: rgb(255, 255, 255); "> (uid=$requestContext.principalName)</span><br style="background-color: rgb(255, 255, 255); "><span style="background-color: rgb(255, 255, 255); "> ]]></span><br style="background-color: rgb(255, 255, 255); "><span style="background-color: rgb(255, 255, 255); "> </dc:FilterTemplate></span><br style="background-color: rgb(255, 255, 255); "></div></blockquote><div><br></div><div><br></div><blockquote type="cite"><span style="background-color: rgb(255, 255, 255); "> Do I need a second one for the ldapGroups</span><br></blockquote><div><br></div>No, just one connector for one directory source.</div><div><br><blockquote type="cite"><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000"><ul>
</ul></div></blockquote><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000"><ul></ul></div></blockquote></blockquote><blockquote type="cite"><div bgcolor="#FFFFFF" text="#000000"><ul><li><p>Do I need a new AttributeDefinition for the groups attribute?
If so, what does that look like?<br></p></li></ul></div></blockquote><div><br></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(255, 147, 0); "><span style="color: #323333"> </span><span style="color: #091480"><resolver:AttributeDefinition </span><span style="color: #098021">id=</span>"isMemberOf"<span style="color: #091480"> </span><span style="color: #098021">xsi:type=</span>"Simple"<span style="color: #091480"> </span><span style="color: #4b5a7d">xmlns=</span>"urn:mace:shibboleth:2.0:resolver:ad"</div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(9, 128, 33); "><span style="color: #091480"> </span>sourceAttributeID=<span style="color: #ff9300">"eduIsMemberOf"</span><span style="color: #091480">></span></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(9, 20, 128); "><span style="color: #323333"> </span><resolver:Dependency <span style="color: #098021">ref=</span><span style="color: #ff9300">"myLDAP"</span> /></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(255, 147, 0); "><span style="color: #323333"> </span><span style="color: #091480"><resolver:AttributeEncoder </span><span style="color: #098021">xsi:type=</span>"SAML2String"<span style="color: #091480"> </span><span style="color: #4b5a7d">xmlns=</span>"urn:mace:shibboleth:2.0:attribute:encoder"</div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(255, 147, 0); "><span style="color: #091480"> </span><span style="color: #098021">name=</span>"urn:oid:1.3.6.1.4.1.5923.1.5.1.1"<span style="color: #091480"> </span><span style="color: #098021">friendlyName=</span>"isMemberOf"<span style="color: #091480"> /></span></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(9, 20, 128); "><span style="color: #323333"> </span></resolver:AttributeDefinition></div><div><br></div><div>or </div><div><br></div><div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(255, 147, 0); "><span style="color: #323333"> </span><span style="color: #091480"><resolver:AttributeDefinition </span><span style="color: #098021">id=</span>"ADmemberOf"<span style="color: #091480"> </span><span style="color: #098021">xsi:type=</span>"Simple"<span style="color: #091480"> </span><span style="color: #4b5a7d">xmlns=</span>"urn:mace:shibboleth:2.0:resolver:ad"<span style="color: #091480"> </span><span style="color: #098021">sourceAttributeID=</span>"memberOf"<span style="color: #091480">></span></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(9, 20, 128); "><span style="color: #323333"><span class="Apple-tab-span" style="white-space:pre"> </span></span><resolver:Dependency <span style="color: #098021">ref=</span><span style="color: #ff9300">"myADLDAP"</span> /></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(255, 147, 0); "><span style="color: #323333"><span class="Apple-tab-span" style="white-space:pre"> </span></span><span style="color: #091480"><resolver:AttributeEncoder </span><span style="color: #098021">xsi:type=</span>"SAML2String"<span style="color: #091480"> </span><span style="color: #4b5a7d">xmlns=</span>"urn:mace:shibboleth:2.0:attribute:encoder"<span style="color: #091480"> </span><span style="color: #098021">name=</span>"urn:oid:1.2.840.113556.1.2.102"<span style="color: #091480"> </span><span style="color: #098021">friendlyName=</span>"ADmemberOf"<span style="color: #091480"> /></span></div><div style="margin: 0px; font-size: 13px; font-family: 'Lucida Sans'; color: rgb(9, 20, 128); "><span style="color: #323333"> </span></resolver:AttributeDefinition></div></div><div><br></div><div>David Bantz</div><div><br></div></div></body></html>