<div dir="ltr"><div>Hi, <br><br>I tried to get list of groups of a user by following <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinitionExamples</a><br><br>but I am getting error in idp-process.log as distinguishedName always returning nothing.<br><br>attribute-resolver.xml:<br clear="all"><!-- get the user's DN from the main LDAP connector (myLDAP) for searching <br> the groups the user is in --><br><resolver:AttributeDefinition id="distinguishedName"<br> xsi:type="ad:Simple" sourceAttributeID="distinguishedName"><br> <resolver:Dependency ref="myLDAP" /><br> <!-- no encoder needed --><br></resolver:AttributeDefinition><br><br><!-- search for all groups the user is recursively in - and flatten the distinguishedName(s) <br> of all the groups into a single multivalued attribute --><br><resolver:DataConnector id="groupLDAP" xsi:type="dc:LDAPDirectory"<br> ldapURL="ldap://192.XXXXXXXX:389" baseDN="OU=Groups and Resources,DC=test,DC=com"<br> principal="CN=admin,DC=test,DC=com" principalCredential="XXXXXXX"><br> <resolver:Dependency ref="distinguishedName" /><br> <dc:FilterTemplate><br> <![CDATA[<br> (member:1.2.840.113556.1.4.1941:=${distinguishedName.get(0)})<br> ]]><br> </dc:FilterTemplate><br> <dc:ReturnAttributes>distinguishedName</dc:ReturnAttributes><br> <dc:LDAPProperty name="java.naming.referral" value="follow" /><br></resolver:DataConnector><br><br><!-- define the memberOf attribute based on the distinguishedName attribute <br> returned by the groupLDAP connector - names of all groups the user is in --><br><resolver:AttributeDefinition id="memberOf"<br> xsi:type="ad:Simple" sourceAttributeID="distinguishedName"><br> <resolver:Dependency ref="groupLDAP" /><br> <!-- no encoder needed --><br></resolver:AttributeDefinition><br><br></div>Please help me.<br><div><br>-- <br><div class="gmail_signature"><div dir="ltr">Thank You,<br>Chaitanya Kumar Ch,<br>+91 9550837582<br></div></div>
</div></div>