<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Hello list,
<div><br>
</div>
<div>this is the way I did manage to release nested groups fetched from active directory to a SP. Is this the correct way? Unfortunately I wasn't able to find too much documentation about this requirement.</div>
<div><br>
</div>
<div>Ciao</div>
<div><br>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">Cristiano
Cumer </span></div>
</div>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br>
</span></div>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><br>
</span></div>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; orphans: 2; text-align: -webkit-auto; text-indent: 0px; widows: 2; border-spacing: 0px;">
<div apple-content-edited="true"><!-- Attributes --></div>
<div apple-content-edited="true"><resolver:AttributeDefinition xsi:type="ad:Simple" id="isMemberOf" sourceAttributeID="cn"></div>
<div apple-content-edited="true"> <resolver:Dependency ref="myLDAPGroup" /></div>
<div apple-content-edited="true"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:oid:1.3.6.1.4.1.20462.5.1.9" /></div>
<div apple-content-edited="true"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.20462.5.1.9" friendlyName="isMemberOf" /></div>
<div apple-content-edited="true"></resolver:AttributeDefinition></div>
<div apple-content-edited="true"> </div>
<div apple-content-edited="true"><resolver:AttributeDefinition xsi:type="ad:Simple" id="distinguishedName" sourceAttributeID="distinguishedName"></div>
<div apple-content-edited="true"> <resolver:Dependency ref="myLDAP" /></div>
<div apple-content-edited="true"> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" /></div>
<div apple-content-edited="true"> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" friendlyName="distinguishedName" /></div>
<div apple-content-edited="true"></resolver:AttributeDefinition></div>
<div apple-content-edited="true"> </div>
<div apple-content-edited="true"><!-- Connectors --></div>
<div apple-content-edited="true"> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"</div>
<div apple-content-edited="true"> ldapURL="<a href="ldap://xxxxx.xxxx.com">ldap://xxxxx.xxxx.com</a>"</div>
<div apple-content-edited="true"> baseDN="dc=xxxxx,dc=com"</div>
<div apple-content-edited="true"> principal="cn=xxxxx,ou=xxxxx,ou=xxxxxxx,dc=xxxxx,dc=com"</div>
<div apple-content-edited="true"> principalCredential="xxxxxx"></div>
<div apple-content-edited="true"> <dc:FilterTemplate></div>
<div apple-content-edited="true"> <![CDATA[</div>
<div apple-content-edited="true"> (samAccountName=$requestContext.principalName)</div>
<div apple-content-edited="true"> ]]></div>
<div apple-content-edited="true"> </dc:FilterTemplate></div>
<div apple-content-edited="true"> <dc:LDAPProperty name="java.naming.referral" value="follow"/></div>
<div apple-content-edited="true"> </resolver:DataConnector></div>
<div apple-content-edited="true"> </div>
<div apple-content-edited="true"> </div>
<div apple-content-edited="true"> <resolver:DataConnector id="myLDAPGroup" xsi:type="dc:LDAPDirectory"</div>
<div apple-content-edited="true"> ldapURL="<a href="ldap://xxxxx.xxxx.com">ldap://xxxxx.xxxx.com</a>"</div>
<div apple-content-edited="true"> baseDN="dc=xxxxx,dc=com"</div>
<div apple-content-edited="true"> principal="cn=xxxxx,ou=xxxx,ou=xxxxxxx,dc=xxxxx,dc=com"</div>
<div apple-content-edited="true"> principalCredential="xxxxxx" maxResultSize="1000" mergeResults="true"></div>
<div apple-content-edited="true"> <resolver:Dependency ref="distinguishedName"/></div>
<div apple-content-edited="true"> <resolver:Dependency ref="myLDAP" /></div>
<div apple-content-edited="true"> <dc:FilterTemplate></div>
<div apple-content-edited="true"> <![CDATA[</div>
<div apple-content-edited="true"> (member:1.2.840.113556.1.4.1941:=$distinguishedName.get(0))</div>
<div apple-content-edited="true"> ]]></div>
<div apple-content-edited="true"> </dc:FilterTemplate></div>
<div apple-content-edited="true"> <dc:ReturnAttributes>cn</dc:ReturnAttributes> </div>
<div apple-content-edited="true"> <dc:LDAPProperty name="java.naming.referral" value="follow"/></div>
<div apple-content-edited="true"> </resolver:DataConnector></div>
</span></div>
</body>
</html>