<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Tamas,
<div><br>
</div>
<div>The easy answer to your question is to ensure that the namespaces for each backend are always different, such that a matched username will always appear in only one system. Then just have two data sources and attributes that depend on both.</div>
<div><br>
</div>
<div>If you can't follow that easy approach, there are a number of hard approaches available to you.</div>
<div><br>
</div>
<div>You will have to do this association yourself somehow, though, I think. The IdP, by design, is not architected with a tight bond between authentication and attribute gathering, and there's no other obvious way to me to do this.</div>
<div><br>
</div>
<div>Maybe someone on the list has a better idea,</div>
<div>Nate.</div>
<div><br>
<div>
<div>On Jun 23, 2014, at 4:33 PM, "Szerb, Tamas" <<a href="mailto:toma@rulez.org">toma@rulez.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>Using Shibboleth IdP 2.4, using same (RDBMS) for JAAS (User/Password auth handler and JDBC JAAS plugin) and attribute resolution.</div>
<div><br>
</div>
<div>I'm lanning to introduce LDAP auth& attrib resolution, but I'd like to know how it is possible to not confuse the backends, so I'd like to make sure that the attributes will be resolved from the database which it was authenticated against?</div>
<div><br>
</div>
<div>I'd like to avoid the situation when the database authenticated users' attributes are resolved from LDAP and vice versa.</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br clear="all">
<div>VWOL<br>
Tamas SZERB <<a href="mailto:toma@rulez.org">toma@rulez.org</a>></div>
</div>
</div>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></blockquote>
</div>
<br>
</div>
</body>
</html>