>>> On 14/08/2009 at 13:40, in message
<[log in to unmask]>, Jethro R Binks
<[log in to unmask]> wrote:
> On Fri, 14 Aug 2009, Andy Swiffin wrote:
>> > Do your CNs look long and path-like? :) If so, maybe tht's all you
>> > need to use. And if it is as simple as that, maybe that's why it all
>> > seems odd - we're trying to think about it too hard!
>>
>> No, the cn is the "common name" part of the DN, e.g. my dn is
>> cn=alswiffin,ou=ics,ou=pi,ou=cs,o=dundee where my cn is just alswiffin.
>
> How do you know the "ou=ics,ou=pi,ou=cs,o=dundee" part? By knowledge of
> the dir structure, or cos you can see it somewhere?
No you can't see this either, in fact _this_ is the bit you actually want in order to be able to see the users containment, we _can_ see the CN, but we already have that!! A users container is not an ldap visible attribute - at least in eDirectory.
Which brings me back to: Is there some internal attribute/value that Shib has that is the users container _or_ their DN and which I can use in an AttributeDefinition??
Chad, are you following this discussion, you're probably the best person to tell us?
Andy
The University of Dundee is a registered Scottish charity, No: SC015096
|