<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Jul 25, 2017 at 2:25 PM, Hong Ye <span dir="ltr"><<a href="mailto:hy93@cornell.edu" target="_blank">hy93@cornell.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">







<div bgcolor="white" lang="EN-US">
<div class="gmail-m_-5024400789855755060WordSection1">
<p class="MsoNormal"><span style="font-size:11pt">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">Some AD attributes can only be returned when doing base level search. How to define search scope in the LDAPConnector?</span></p></div></div></blockquote><div><br></div><div>searchScope= SUBTREE</div><div>See <a href="https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector">https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector</a></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="white" lang="EN-US"><div class="gmail-m_-5024400789855755060WordSection1"><p class="MsoNormal"><span style="font-size:11pt"> Can the baseDN be defined using user’s distinguishedName?</span></p></div></div></blockquote><div><br></div><div>No, the baseDN is a static property for each DataConnector.<br></div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>