[prev in list] [next in list] [prev in thread] [next in thread]
List: shibboleth-users
Subject: RE: Attribute Transferring
From: DominicChen <dominic.chen () morningstar ! com>
Date: 2013-04-24 7:36:05
Message-ID: E5C590BB34957D4BADD116E09B59084502281124 () MSEXCHM84 ! morningstar ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi, Peter,
Thanks for your pointing out. It seems materials you linked is just what I want. I \
will read all related information for the issue accessing attribute from \
applications.
Thanks.
Dominic
From: Peter Schober [via Shibboleth] \
[mailto:ml-node+s1660669n7586380h98@n2.nabble.com]
Sent: Wednesday, April 24, 2013 3:03 PM
To: Dominic Chen
Subject: Re: Attribute Transferring
* DominicChen <[hidden email]</user/SendEmail.jtp?type=node&node=7586380&i=0>> \
[2013-04-24 08:48]:
> I have defined a Principal Name attribute in attribute-resolver.xml
> and add some changes in attribute-filter.xml[IdP] and
> attribute-map.xml[SP]. I can see I set attributes has already been
> in session scope using URL: .
[...]
> Attributes
> UserEmail: 1 value(s)
> priAutMet: 1 value(s)
I don't understand your question then. Seems you have everything
working?
> Taking example of UserEmail attribute, I want this attribute to
> transfer to tomcat server behind Apache-Httpd. When program running
> in Tomcat gets user's email, it could distinguishs the what
> permission should be granted to.
Is that another qustion altogether or are we still talking about the
ExternalAuthn login handler? How attributes are accessed at the SP is
fully independent of how they came into the IdP.
Anyway: Here's the documentation for making attributes available to
Java servlet containers, including Tomcat:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess
-peter
--
To unsubscribe from this list send an email to [hidden \
email]</user/SendEmail.jtp?type=node&node=7586380&i=1>
________________________________
If you reply to this email, your message will be added to the discussion below:
http://shibboleth.1660669.n2.nabble.com/Attribute-Transferring-tp7586377p7586380.html
To unsubscribe from Attribute Transferring, click \
here<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=unsubscrib \
e_by_code&node=7586377&code=ZG9taW5pYy5jaGVuQG1vcm5pbmdzdGFyLmNvbXw3NTg2Mzc3fDE5OTY3MjQ5ODQ=>.
NAML<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_vie \
wer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-n \
abble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcr \
umbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
--
View this message in context: \
http://shibboleth.1660669.n2.nabble.com/Attribute-Transferring-tp7586377p7586381.html \
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
[Attachment #5 (text/html)]
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi, \
Peter,<o:p></o:p></span></p> <p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks \
for your pointing out. It seems materials you linked is just what I want. I \
will read all related information for the issue accessing attribute from \
applications.<o:p></o:p></span></p> <p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks.<o:p></o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Dominic<o:p></o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span \
style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span \
style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span \
style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Peter \
Schober [via Shibboleth] [mailto:ml-node+<a \
href="/user/SendEmail.jtp?type=node&node=7586381&i=0" target="_top" rel="nofollow" \
link="external">[hidden email]</a>] <br>
<b>Sent:</b> Wednesday, April 24, 2013 3:03 PM<br>
<b>To:</b> Dominic Chen<br>
<b>Subject:</b> Re: Attribute Transferring<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">* DominicChen <<a \
href="/user/SendEmail.jtp?type=node&node=7586380&i=0" target="_top" \
rel="nofollow" link="external">[hidden email]</a>> [2013-04-24 08:48]: <br>
> I have defined a Principal Name attribute in attribute-resolver.xml <br>
> and add some changes in attribute-filter.xml[IdP] and <br>
> attribute-map.xml[SP]. I can see I set attributes has already been <br>
> in session scope using URL: . <br>
[...] <br>
> Attributes <br>
> UserEmail: 1 value(s) <br>
> priAutMet: 1 value(s) <br>
<br>
I don't understand your question then. Seems you have everything <br>
working? <br>
<br>
> Taking example of UserEmail attribute, I want this attribute to <br>
> transfer to tomcat server behind Apache-Httpd. When program running <br>
> in Tomcat gets user's email, it could distinguishs the what <br>
> permission should be granted to. <br>
<br>
Is that another qustion altogether or are we still talking about the <br>
ExternalAuthn login handler? How attributes are accessed at the SP is <br>
fully independent of how they came into the IdP. <br>
Anyway: Here's the documentation for making attributes available to <br>
Java servlet containers, including Tomcat: <br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall" \
target="_top" rel="nofollow" \
link="external">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall</a><br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess" \
target="_top" rel="nofollow" \
link="external">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess</a><br>
-peter <br>
-- <br>
To unsubscribe from this list send an email to <a \
href="/user/SendEmail.jtp?type=node&node=7586380&i=1" target="_top" \
rel="nofollow" link="external"> [hidden email]</a> <br>
<br>
<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="1" width="100%" noshade="" style="color:#CCCCCC" align="center">
</div>
<div>
<div>
<p class="MsoNormal"><b><span \
style="font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444">If \
you reply to this email, your message will be added to the discussion \
below:<o:p></o:p></span></b></p> </div>
<p class="MsoNormal"><span \
style="font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444"><a \
href="http://shibboleth.1660669.n2.nabble.com/Attribute-Transferring-tp7586377p7586380.html" \
target="_top" rel="nofollow" \
link="external">http://shibboleth.1660669.n2.nabble.com/Attribute-Transferring-tp7586377p7586380.html</a>
<o:p></o:p></span></p>
</div>
<div style="margin-top:4.8pt">
<p class="MsoNormal" style="line-height:18.0pt"><span \
style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:#666666">To \
unsubscribe from Attribute Transferring, <a href="" target="_top" rel="nofollow" \
link="external"> click here</a>.<br>
<a href="http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_ \
viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.Basic \
Namespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamesp \
ace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" \
target="_top" rel="nofollow" link="external"><span \
style="font-size:7.0pt;font-family:"Times New \
Roman","serif"">NAML</span></a> <o:p></o:p></span></p>
</div>
</div>
<br/><hr align="left" width="300" />
View this message in context: <a \
href="http://shibboleth.1660669.n2.nabble.com/Attribute-Transferring-tp7586377p7586381.html">RE: \
Attribute Transferring</a><br/> Sent from the <a \
href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth \
- Users mailing list archive</a> at Nabble.com.<br/>
--
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic