Details
-
New Feature
-
Resolution: Fixed
-
Minor
-
None
-
None
Description
The boolean multiple-results configuration option will provision multiple objects on a target LDAP directory for a single subject.
<source-subject-identifiers>
<source-subject-identifier source="jdbc" subject-attribute="id">
<ldap-search base="ou=testpeople,${base}" scope="subtree_scope" filter="(cn=
)"
multiple-results="false" />
</source-subject-identifier>
</source-subject-identifiers>
If two objects have the same cn
dn: cn=test.subject.1,ou=testpeople
cn: test.subject.1
dn: cn=test.subject.2,ou=testpeople,
cn: test.subject.2
cn: test.subject.1
and a group has one member "test.subject.1",
then both objects will be provisioned if multiple-results="true"
dn: cn=groupB,ou=edu,ou=testgroups,${base}
hasMember: name.test.subject.1
member: cn=test.subject.1,ou=testpeople
member: cn=test.subject.2,ou=testpeople
dn: cn=test.subject.1,ou=testpeople,dc=testgrouper,dc=edu
ismemberof: edu:groupB
dn: cn=test.subject.2,ou=testpeople,dc=testgrouper,dc=edu
ismemberof: edu:groupB
The hasMember (group-members-name-list) value is single valued since the single subject with identifier "test.subject.1" has two provisioned objects.