[prev in list] [next in list] [prev in thread] [next in thread]
List: shibboleth-users
Subject: Re: [Shib-Users] Resolver definition xsi type script
From: Ahsan Imam <eferesen () gmail ! com>
Date: 2010-04-29 16:51:02
Message-ID: z2xb16cb7961004290951nf698153fw2a001534e7074b08 () mail ! gmail ! com
[Download RAW message or body]
Hi Peter,
Perhaps I did not explain correctly,
I am not changing eduPersonAffiliation. I am using eduPersonAffiliation as
a resolver dependency.
You can see in the attribute definition (below) that I am using values from
edupersonaffiliation and nauAffiliationTypeCode to to set values for custom
attribute called exampleLibraryPatron. exampleLibraryPatron is an attribute
which does not exist in ldap.
The question regarding the 'case' was when I do a
edupersonaffiliation.getValues().contains("employee") in the script, I was a
little worried that a case could exist (highly unlikely) where the case is
different. I just wanted to account for that. From what Scott mentioned in
his reply it seems that case will not be an issue whether it is 'employee'
or 'Employee'. Hopefully I am understanding this correctly.
Thanks
Here is the attribute definition:
<resolver:AttributeDefinition id="exampleLibraryPatron" xsi:type="Script"
xmlns="urn:mace:shibboleth:2.0:resolver:ad">
<resolver:Dependency ref="edupersonaffiliation" />
<resolver:Dependency ref="exampleAffiliationTypeCode" />
<resolver:AttributeEncoder xsi:type="SAML1String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="http://www.example.edu/attributes/exampleLibraryPatron" />
<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="http://www.example.edu/attributes/nauLibraryPatron"
friendlyName="Refworks" />
<Script><![CDATA[
importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);
importPackage(Packages.org.slf4j);
logger =
LoggerFactory.getLogger("edu.internet2.middleware.shibboleth.resolver.Script.scriptTest");
logger.debug("Values for eduPersonaffiliation are " +
edupersonaffiliation.getValues() );
if ( edupersonaffiliation == null) {
edupersonaffiliation = new
BasicAttribute("edupersonaffiliation");
}
if ( nauAffiliationTypeCode == null) {
nauAffiliationTypeCode = new
BasicAttribute("nauAffiliationTypeCode");
}
exampleLibraryPatron = new BasicAttribute("nauLibraryPatron");
if ( edupersonaffiliation.getValues().contains("employee")
||
edupersonaffiliation.getValues().contains("student") ||
exampleAffiliationTypeCode.getValues().contains("0011") ||
exampleAffiliationTypeCode.getValues().contains("0177") more logic
) {
exampleLibraryPatron.getValues().add("Y");
} else {
exampleLibraryPatron.getValues().add("N");
}
]]></Script>
</resolver:AttributeDefinition>
On Wed, Apr 28, 2010 at 1:51 PM, Peter Schober
<peter.schober@univie.ac.at>wrote:
>
> If you create the eduPersonAffiliation value yourself via a script
> then I don't understand how you can end up with the other problem you
> were asking about:
>
>
> -peter
>
--
s/Ahsan/?/g
[Attachment #3 (text/html)]
Hi Peter,<br><br>Perhaps I did not explain correctly,<br><br>I am not changing \
eduPersonAffiliation. I am using eduPersonAffiliation as <br>a resolver \
dependency.<br><br>You can see in the attribute definition (below) that I am using \
values from edupersonaffiliation and nauAffiliationTypeCode to to set values for \
custom attribute called exampleLibraryPatron. exampleLibraryPatron is an attribute \
which does not exist in ldap.<br> <br>The question regarding the 'case' was \
when I do a edupersonaffiliation.getValues().contains("employee") in the \
script, I was a little worried that a case could exist (highly unlikely) where the \
case is different. I just wanted to account for that. From what Scott mentioned \
in his reply it seems that case will not be an issue whether it is 'employee' \
or 'Employee'. Hopefully I am understanding this correctly.<br> \
<br>Thanks<br><br>Here is the attribute definition:<br><br> \
<resolver:AttributeDefinition id="exampleLibraryPatron" \
xsi:type="Script" \
xmlns="urn:mace:shibboleth:2.0:resolver:ad"><br> \
<resolver:Dependency ref="edupersonaffiliation" /><br> \
<resolver:Dependency ref="exampleAffiliationTypeCode" /><br><br> \
<resolver:AttributeEncoder xsi:type="SAML1String" \
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br> name="<a \
href="http://www.example.edu/attributes/exampleLibraryPatron">http://www.example.edu/attributes/exampleLibraryPatron</a>" \
/><br><br> <resolver:AttributeEncoder \
xsi:type="SAML2String" \
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"<br> name="<a \
href="http://www.example.edu/attributes/nauLibraryPatron">http://www.example.edu/attributes/nauLibraryPatron</a>" \
friendlyName="Refworks" /><br><br> \
<Script><![CDATA[<br> \
importPackage(Packages.edu.internet2.middleware.shibboleth.common.attribute.provider);<br> \
importPackage(Packages.org.slf4j);<br><br> logger = \
LoggerFactory.getLogger("edu.internet2.middleware.shibboleth.resolver.Script.scriptTest");<br>
<br> logger.debug("Values for eduPersonaffiliation are \
" + edupersonaffiliation.getValues() );<br><br> if ( \
edupersonaffiliation == null) {<br> \
edupersonaffiliation = new BasicAttribute("edupersonaffiliation");<br> \
}<br><br> if ( nauAffiliationTypeCode == null) {<br> \
nauAffiliationTypeCode = new BasicAttribute("nauAffiliationTypeCode");<br> \
}<br><br> exampleLibraryPatron = new \
BasicAttribute("nauLibraryPatron");<br> <br> if ( \
edupersonaffiliation.getValues().contains("employee") || <br> \
edupersonaffiliation.getValues().contains("student") ||<br> \
exampleAffiliationTypeCode.getValues().contains("0011") || \
<br> exampleAffiliationTypeCode.getValues().contains("0177") \
more logic<br> ) {<br> \
exampleLibraryPatron.getValues().add("Y");<br> } else \
{<br> exampleLibraryPatron.getValues().add("N");<br> \
}<br> <br> ]]></Script><br><br><br> \
</resolver:AttributeDefinition><br><br><br><br><br><br><div \
class="gmail_quote"> On Wed, Apr 28, 2010 at 1:51 PM, Peter Schober <span \
dir="ltr"><<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>></span> \
wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, \
204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
If you create the eduPersonAffiliation value yourself via a script<br>
then I don't understand how you can end up with the other problem you<br>
were asking about:<br>
<br>
<br><font color="#888888">-peter<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>s/Ahsan/?/g<br>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic