<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hello,
<div class=""><br class="">
</div>
<div class="">We are setting up 3.2.1 from scratch. We’re moving up from V2, and I’m fairly new at this setup. Quick question(s)- do attribute-resolver-ldap.xml and attribute-resolver.xml work in coexistence or only either is to be used? if they do exist together,
where does “myLDAP” DC need to be defined and attribute definitions that depend on myLDAP? either or both? Is there anything special to be done with settings/files? </div>
<div class="">I’ve looked at the examples, and attribute-resolver-full.xml, tried it too without success. DC does not have any attributes when placed in resolver.xml. Can someone send an example of their setup with attribute-resolver-ldap.xml and resolver.xml,
link to documentation or suggest otherwise?</div>
<div class=""><br class="">
</div>
<div class="">With much appreciation, Thanks!</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Detailed description: </div>
<div class=""><br class="">
</div>
<div class="">We have a DataConnector “myLDAP" defined in attribute-resolver-ldap.xml. We also have an attribute-resolver.xml that use attribs from -ldap.xml, as dependency/sourceAttribute. This seems to work only for 2 attributes though. For others, like sn,displayName,givenName
etc I have tried the following with either no results or breaking the attribute-resolver itself. </div>
<div class="">
<ol class="MailOutline">
<li class="">defined attribute in attribute-resolver-ldap.xml, then defined same in attribute-resolver to use the previously defined as a sourceAttributeId and/or dependency.
<ol class="">
<li class="">If IDs are same in both files, log says “Attribute Resolver 'ShibbolethAttributeResolver': Plugin 'displayName' and plugin 'displayName' have a circular dependecy on each other"</li><li class="">if I change ID in ar -ldap.xm (dispName) l and use it as a sourceAttributeID and/or dependency ref=“dispName”, log says “Attribute Resolver 'ShibbolethAttributeResolver': Plugin 'displayName' has a dependency on plugin 'dispName' which doesn't
exist"</li></ol>
</li><li class="">Removed all attribute definitions and DataConnector from attribute-resolver-ldap.xml, and tried to use attribute-resolver.xml exclusively with DC -“myLDAP” and making dependency ref=“myLDAP” changes. This doesn’t even pick up the previously working
attributes like uid/eppn/mail.</li></ol>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><b class="">File snippet</b>: uid/eppn/mail work. However, sn,displayName etc do not work that need to be exactly as they are in LDAP, and not manipulated. </div>
<div class=""><br class="">
</div>
<div class=""><!—in attribute-resolver-ldap.xml—></div>
<div class="">
<div class=""><resolver:AttributeDefinition id="uid" xsi:type="ad:Simple" sourceAttributeID="uid"></div>
<div class=""> <resolver:Dependency ref="myLDAP" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""> <resolver:AttributeDefinition id="mail" xsi:type="ad:Simple" sourceAttributeID="mail"></div>
<div class=""> <resolver:Dependency ref="myLDAP" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""> <!-- ********* displayName ********** --></div>
<div class=""> <resolver:AttributeDefinition id="displayName" xsi:type="ad:Simple" sourceAttributeID="displayName"></div>
<div class=""> <resolver:Dependency ref="myLDAP" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:displayName" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><!—in attribute-resolver.xml—></div>
<div class="">
<div class=""> <resolver:AttributeDefinition id="eduPersonPrincipalName" xsi:type="ad:Scoped" scope="%{idp.scope}" sourceAttributeID="uid"></div>
<div class=""> <resolver:Dependency ref="uid" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1ScopedString" name="urn:mace:dir:attribute-def:eduPersonPrincipalName" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2ScopedString" name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" friendlyName="eduPersonPrincipalName" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><resolver:AttributeDefinition id="uid" xsi:type="ad:PrincipalName"></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><resolver:AttributeDefinition id="mail" xsi:type="ad:Template"></div>
<div class=""> <resolver:Dependency ref="uid" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:mail" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:0.9.2342.19200300.100.1.3" friendlyName="mail" encodeType="false" /></div>
<div class=""> <ad:Template></div>
<div class=""> <![CDATA[</div>
<div class=""> ${uid}@%{idp.scope}</div>
<div class=""> ]]></div>
<div class=""> </ad:Template></div>
<div class=""> <ad:SourceAttribute>uid</ad:SourceAttribute></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""> <!-- ********* displayName ********** --></div>
<div class=""> <resolver:AttributeDefinition id="displayName" xsi:type="ad:Simple" sourceAttributeID="displayName"></div>
<div class=""> <resolver:Dependency ref="displayName" /> </div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML1String" name="urn:mace:dir:attribute-def:displayName" encodeType="false" /></div>
<div class=""> <resolver:AttributeEncoder xsi:type="enc:SAML2String" name="urn:oid:2.16.840.1.113730.3.1.241" friendlyName="displayName" encodeType="false" /></div>
<div class=""> </resolver:AttributeDefinition></div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thanks, </div>
<div apple-content-edited="true" class="">
<div class=""><br class="">
</div>
<div class="">Shweta Kautia</div>
<div class=""><br class="">
</div>
</div>
<br class="">
</body>
</html>