From CAS 4.1.4 we are using LdaptivePersonAttributeDao to get attributes. Because our LDAP (old) does not have groups tied to the user we have to query the groups separately after getting other user attribs. We query for the user as uniquemember and return cn for those that match, which works to get a list of groups that the user is in. But, it is not unique like dn is. But, it still only gets cn when I have both can bd dn defined in the attribute map.
My log shows this:
2016-05-06 09:41:30,635 DEBUG [http-bio-8080-exec-3] [org.jasig.services.persondir.support.ldap.LdaptivePersonAttributeDao] - Converted ldap DN entry [cn=duosetopts,ou=sso,ou=groups,dc=bgsu,dc=edu] to attribute map {cn=[duosetopts]}
Can I get the DN Entry into the attribute map and how?
Thanks.
Ted F. Fisher
Information Technology Services
![]()