<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">We use filters at both authentication and attribute resolver, as we allow use of either student number or name-based identifier in logins.<div><br></div><div>in the attribute resolver:</div><div>LDAP:</div><div><div style="margin: 0px; font-family: Courier; color: rgb(1, 163, 175); background-color: rgb(223, 219, 196);"><span style="color: #4c2f2d"> </span><FilterTemplate></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <span style="color: #00a500"><![</span><span style="color: #b6660a">CDATA</span><span style="color: #00a500">[</span></div><div style="margin: 0px; font-family: Courier; color: rgb(177, 37, 18); background-color: rgb(223, 219, 196); position: static; z-index: auto;"> (|(uasystemid=$requestContext.principalName)(bannerid=$requestContext.principalName))</div><div style="margin: 0px; font-family: Courier; color: rgb(177, 37, 18); background-color: rgb(223, 219, 196);"> <span style="color: #00a500">]]></span></div><div style="margin: 0px; font-family: Courier; color: rgb(1, 163, 175); background-color: rgb(223, 219, 196);"><span style="color: #4c2f2d"> </span></FilterTemplate></div></div><div>AD:</div><div><div style="margin: 0px; font-family: Courier; color: rgb(1, 163, 175); background-color: rgb(223, 219, 196);"><FilterTemplate></div><div style="margin: 0px; font-family: Courier; color: rgb(76, 47, 45); background-color: rgb(223, 219, 196);"> <span style="color: #00a500"><![</span><span style="color: #b6660a">CDATA</span><span style="color: #00a500">[</span></div><div style="margin: 0px; font-family: Courier; color: rgb(177, 37, 18); background-color: rgb(223, 219, 196); position: static; z-index: auto;"> (|(sAMAccountName=$requestContext.principalName)(uaIdentifier=$requestContext.principalName))</div><div style="margin: 0px; font-family: Courier; color: rgb(177, 37, 18); background-color: rgb(223, 219, 196);"> <span style="color: #00a500">]]></span></div><div style="margin: 0px; font-family: Courier; color: rgb(1, 163, 175); background-color: rgb(223, 219, 196);"><span style="color: #4c2f2d"> </span></FilterTemplate></div></div><div><br></div><div><div><br></div><div>David Bantz<br><div><div><br><div><div>On Mon, 17 Mar 2014, at 10:15 , Steven Carmody <<a href="mailto:steven_carmody@brown.edu">steven_carmody@brown.edu</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">The other thought I just had was to modify my ldap search filter to<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">something like this:</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span class="Apple-tab-span" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: pre;"> </span><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">( ((uid=[entered value]) OR (eduPersonPrincipalName=[EPPN value]) )</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;">where only one those would match a user object .</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"></blockquote></div><br></div></div></div></div></body></html>