Grouper Loader LDAP simple lookup by DN (with cache)

Use this if:

1. If you need to dereference members of a simple LDAP loader group
2. You have a Group hasMember that has User DN values
3. The users don't have memberOf
4. The RDN in the user DN is not a subject ID or identifier
5. There are not that many lookups per day (e.g. less than a couple thousand after a cache is used)

Note, the cache is shared with other jobs with the same ldapLookup settings

Group in LDAP

User in LDAP

Ignore the fact that the RDN of the user DN has the subject ID in it in this example.  If that is the case for you, you can simply unpack that

The loader job will:

1. Filter the group
2. Return the DN's of the users
3. Lookup those DN's in memory cache (if exist use those)
4. Lookup those DN's in LDAP (if not exist in cache)
5. Get the uid attribute
6. Use that as the subjectId

The important part of this config is the subject expression:

${ldapLookup.assignLdapConfigId('personLdap').assignAttributeNameResult('uid').assignCacheForMinutes(24*60).assignSearchDn('%TERM%').assignTerm(subjectId).doLookup()}

Each time you run the job it will LDAP lookup each subject if it hasn't looked that up in the last amount of cache minutes (in this case one day)