<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 8/7/20 12:04 PM, Zach Hanson-Hart
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:SN6PR11MB28770F22C8D997BA8E004539B5490@SN6PR11MB2877.namprd11.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
<div style="font-family: Consolas, Courier, monospace; font-size:
12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255,
255);">
<div style="color: black; font-size: 12pt; font-family:
Consolas, Courier, monospace, serif, EmojiFont;
background-color: white;">
Hello list!</div>
<div style="color: black; font-size: 12pt; font-family:
Consolas, Courier, monospace, serif, EmojiFont;
background-color: white;">
<br>
</div>
<div style="color: black; font-size: 12pt; font-family:
Consolas, Courier, monospace, serif, EmojiFont;
background-color: white;">
I have a use case to grab the DNs of all of the matching
entries on an LDAPConnector. These are groups with membership
containing the principalName from the requestContext, but the
users do not have entries in the directory. It is an OpenLDAP
directory. I've tried various things for ReturnAttributes,
like 1.1, dn, distinguishedName just as a shot in the dark. <br>
</div>
<div style="color: black; font-size: 12pt; font-family:
Consolas, Courier, monospace, serif, EmojiFont;
background-color: white;">
<br>
</div>
<div style="color: black; font-size: 12pt; font-family:
Consolas, Courier, monospace, serif, EmojiFont;
background-color: white;">
The entries have objectClass organizationalUnit and
eduMember. I have no problem getting the OU of the entries as
an IDP attribute and releasing it. But I can't get DNs
<span>🙁</span><br>
</div>
</div>
<br>
</blockquote>
<p><br>
</p>
<p>Since it's OpenLDAP you can probably take advantage of
operational attributes. Specify "+" in ReturnAttributes (in
addition to whatever other attribs you want), and you should see
it return entryDN as a regular attribute of each returned object.
See:</p>
<p><br>
</p>
<p><a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP4/ReturnAttributes">https://wiki.shibboleth.net/confluence/display/IDP4/ReturnAttributes</a><br>
</p>
</body>
</html>