<p dir="ltr">Thanks for the information. I'll take look at this. Thanks again.</p>
<p dir="ltr">--<br>
Sent from mobile device<br>
Daniel Pryor - 208.757.2680</p>
<div class="gmail_quote">On Nov 26, 2014 7:53 PM, "Douglas E Engert" <<a href="mailto:deengert@gmail.com">deengert@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
On 11/26/2014 6:04 PM, Daniel Pryor wrote:<br>
> We are using port 3268 and the ldaploginmodule. We have not tried another user, because the same user was able to query it via ldapsearch and ldifde. Do you suggest we still try using another more<br>
> privileged user?<br>
<br>
<br>
port 3286 accesses the Global Catalog. The GC does not have all the attributes, employeeID is not it the GC. See:<br>
<br>
<a href="http://msdn.microsoft.com/en-us/library/ms675094(v=vs.85).aspx" target="_blank">http://msdn.microsoft.com/en-us/library/ms675094(v=vs.85).aspx</a><br>
<br>
There are ways to add it to the GC.<br>
<br>
><br>
> Thanks<br>
><br>
> Dan<br>
><br>
> *From:*<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> <mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> [mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> <mailto:<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>>] *On Behalf Of *David Bantz<br>
> *Sent:* Wednesday, November 26, 2014 4:59 PM<br>
> *To:* Shib Users<br>
> *Subject:* Re: empoyeeID value not given<br>
><br>
> On Nov 26, 2014, at 14:51, Daniel Pryor <<a href="mailto:dpryor@parchment.com">dpryor@parchment.com</a> <mailto:<a href="mailto:dpryor@parchment.com">dpryor@parchment.com</a>>> wrote:<br>
><br>
> I set up a shibboleth to query against active directory for the basics (employeeID, given name, sn, etc). It picks up all fields except employeeID.<br>
><br>
> Using the general services catalog port 3268? If so, is employeeID released?<br>
><br>
><br>
><br>
> When the logs are in DEBUG mode it says discarding because no value was given.<br>
><br>
><br>
><br>
> We have validated via ldifde and ldapsearch that the attribute is set.<br>
><br>
> Validated using your ShibbolethIdP service account? Or another account that might have more privileges.<br>
><br>
><br>
><br>
> Thoughts?<br>
><br>
> Thanks<br>
><br>
> Dan<br>
><br>
> --<br>
> To unsubscribe from this list send an email <a href="mailto:tousers-unsubscribe@shibboleth.net">tousers-unsubscribe@shibboleth.net</a> <mailto:<a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>><br>
><br>
><br>
><br>
<br>
--<br>
<br>
Douglas E. Engert <<a href="mailto:DEEngert@gmail.com">DEEngert@gmail.com</a>><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>