grouper-users - [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] subject.properties "virtual attribute" being passed to LDAP backend

From: Liam Hoekenga <>
To:
Subject: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend
Date: Wed, 24 Jan 2018 15:38:09 -0600
Ironport-phdr: 9a23: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

We are constructing a virtual attribute in subject.properties to provide a description string..

subjectApi.source.ldap.param.subjectVirtualAttribute_0_searchAttribute0.value = ${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('UID'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('CN'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('ENTITYID'), "")}

We then tell the subjectApi to use that virtual attribute as the description...

subjectApi.source.ldap.param.Description_AttributeType.value = searchAttribute1

The subject mechanism includes searchAttribute1 in it's LDAP query. I'm confused as to why it does that if it's a virtual attribute?

Liam

[grouper-users] subject.properties "virtual attribute" being passed to LDAP backend, Liam Hoekenga, 01/24/2018
- RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend, Black, Carey M., 01/25/2018
  - Re: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend, Liam Hoekenga, 01/25/2018
    - RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend, Hyzer, Chris, 01/25/2018
- RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend, Hyzer, Chris, 01/26/2018

List archive

[grouper-users] subject.properties "virtual attribute" being passed to LDAP backend