[upki-fed:152] Re: [upki-fed:150] Active Directory 上の eduPerson 属性について

[xxxxxx@xxxxxxxxx]

やまじです．

** On Thu, 4 Feb 2010 14:43:04 +0900 (JST)
** kaz igarashi <xxx@xxxxxxxxxxx> writes:

> AttributeDefinition で sourceAttributeID に拡張スキーマ以外の属性値
> (例えば description 等)を指定すれば test-sp に値が渡るので，LDAP の
> DataConnector が取得した直後の値を直接確認できないかと悩んでいます．

SPにアクセスした後にIdPのidp-process.logをみたときに，以下のような感じ
で，Found the following attributeというログにその属性がでていないでし
ょうか？

15:18:53.336 - DEBUG [edu.vt.middleware.ldap.Ldap:549] - Search with the following parameters:
15:18:53.336 - DEBUG [edu.vt.middleware.ldap.Ldap:550] -   dn = o=test_o,dc=ac,c=JP
15:18:53.337 - DEBUG [edu.vt.middleware.ldap.Ldap:551] -   filter = (uid=yamaji)
15:18:53.337 - DEBUG [edu.vt.middleware.ldap.Ldap:552] -   filterArgs =
15:18:53.337 - DEBUG [edu.vt.middleware.ldap.Ldap:554] -     none
15:18:53.337 - DEBUG [edu.vt.middleware.ldap.Ldap:558] -   retAttrs =
15:18:53.338 - DEBUG [edu.vt.middleware.ldap.Ldap:560] -     all attributes
15:18:53.338 - TRACE [edu.vt.middleware.ldap.Ldap:565] -   config = {java.naming.provider.url=ldap://localhost:389, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory}
15:18:53.363 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:882] - Found the following attribute: uid=[yamaji]
15:18:53.364 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:882] - Found the following attribute: mail=[xxxxxx@xxxxxxxxx]
15:18:53.364 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:882] - Found the following attribute: eduPersonAffiliation=[member]
15:18:53.364 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.dataConnector.LdapDataConnector:882] - Found the following attribute: sn=[yamaji]
ひっぱってこれた属性がでます．
-- 
Kazu