Shibboleth Developers

[david t <>]

Hello,

 

I use Shibboleth 1.3  and want to configure IDP resolver.

I would like that some LDAP values  come from  a search filter wich  not depend to principal credential.

 

Like this :

 

<SimpleAttributeDefinition id="urn:mace:dir:attribute-def:cn"> <!--cn LDAP  -->

<DataConnectorDependency requires="directory"/>

</SimpleAttributeDefinition>

 

<ScriptletAttributeDefinition id="urn:mace:dir:attribute-def:cnuid" sourceName="cnuid"> <!--transform principal -->

<DataConnectorDependency requires="param"/>

<Scriptlet><![CDATA[

 

resolverAttribute.addValue("valueforldap")//exemple cnuid return value

]]></Scriptlet>

 

</ScriptletAttributeDefinition>

<JNDIDirectoryDataConnector id="directory">

<Search filter="uid=%cnuid%"> <---cnuid attribut value --urn:mace:dir:attribute-def:cnuid...--

<Controls searchScope="SUBTREE_SCOPE" returningObjects="false" />

</Search>

<Property name="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory" />

<Property name="java.naming.provider.url" value=ldap://xxxxxxx />

<Property name="java.naming.security.principal" value="xxxxxxx" />

<Property name="java.naming.security.credentials" value="xxxxxxx" />

</JNDIDirectoryDataConnector>

 

Is it possible ? how could really do that  ?

 

Thanks for your help!

 

David