Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend


Chronological Thread 
  • From: "Hyzer, Chris" <>
  • To: Liam Hoekenga <>, "" <>
  • Subject: RE: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend
  • Date: Fri, 26 Jan 2018 00:45:56 +0000
  • Accept-language: en-US
  • Authentication-results: spf=none (sender IP is ) ;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Yes, this was a bug.  I think mostly it didn’t affect the runtime and no one noticed.  Fixed in grouper_v2_3_0_api_patch_91

 

https://bugs.internet2.edu/jira/browse/GRP-1669

 

btw, I assume you have a searchAttribute1 configured, and you don’t need to change this

 

FROM:

 

subjectApi.source.ldap.param.Description_AttributeType.value = searchAttribute1

 

TO:

 

subjectApi.source.ldap.param.Description_AttributeType.value = searchAttribute0

 

Thanks

Chris

 

 

From: [mailto:] On Behalf Of Liam Hoekenga
Sent: Wednesday, January 24, 2018 4:38 PM
To:
Subject: [grouper-users] subject.properties "virtual attribute" being passed to LDAP backend

 

We are constructing a virtual attribute in subject.properties to provide a description string..

 

subjectApi.source.ldap.param.subjectVirtualAttribute_0_searchAttribute0.value = ${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('UID'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('CN'), "")},${subjectUtils.defaultIfBlank(subject.getAttributeValueOrCommaSeparated('ENTITYID'), "")}

 

We then tell the subjectApi to use that virtual attribute as the description...

subjectApi.source.ldap.param.Description_AttributeType.value = searchAttribute1

 

The subject mechanism includes searchAttribute1 in it's LDAP query.  I'm confused as to why it does that if it's a virtual attribute?

 

Liam


Archive powered by MHonArc 2.6.19.

Top of Page