<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 17, 2015 at 9:24 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div id=":2sd" class="" style="overflow:hidden">Where is there anything in the default configuration that tries to use the property in ldap.properties in the resolver? I think it's only used for authentication config.<br></div></blockquote><div><br></div><div>The default ldap.config doesn't include an entry for idp.attribute.resolver.LDAP.returnAttributes, but both attribute-resolver-full.xml and attribute-resolver-ldap.xml pull all of their LDAP information from ldap.properties except for the return attributes. It didn't unreasonable to try and pull that information from the properties file as well.</div>
<div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div id=":2sd" class="" style="overflow:hidden">
If you did want to use it in the resolver, the expression I suggested is probably a way to do it. In practice though, it seems unlikely that the same LDAP attributes would be requested in the two use cases.</div></blockquote></div><div class="gmail_extra"><br></div>I guess that issue isn't so much requesting that the same attributes be retrieved by the authenticator and the resolver, but that the return attributes for the resolver cannot be placed in the properties file. Every format I've tried for the resolver has failed...</div><div class="gmail_extra"><br></div><div class="gmail_extra"><div class="gmail_extra">idp.attribute.resolver.LDAP.returnAttributes = uid mail</div><div class="gmail_extra"><div class="gmail_extra">idp.attribute.resolver.LDAP.returnAttributes = uid, mail</div><div class="gmail_extra"><div class="gmail_extra">idp.attribute.resolver.LDAP.returnAttributes = uid,mail</div><div class="gmail_extra"><br></div></div></div>It just feels like an inconsistency in the configuration.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div></div>