Skip to Content.
Sympa Menu

perfsonar-dev - Re: [pS-dev] Help needed for the design of the authorization request

Subject: perfsonar development work

List archive

Re: [pS-dev] Help needed for the design of the authorization request


Chronological Thread 
  • From: "Jeff W. Boote" <>
  • To:
  • Cc: Cándido Rodríguez Montes <>, " List" <>
  • Subject: Re: [pS-dev] Help needed for the design of the authorization request
  • Date: Fri, 9 May 2008 09:42:04 -0600

Specifically... Will this need to 'ride' along within the context of other messages? Or is this only within the context of a service communicating with the AS? (If it needs to 'ride along' it would argue for perhaps actually using the SOAP headers, or perhaps message parameters.)

jeff

On May 9, 2008, at 5:35 AM, Jason Zurawski wrote:

Cándido;

I need to include a XACML request inside the authorization request that I'm trying to define right now. That XACML request is something like:
<Request>
<Subject SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject ">
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id " DataType="http://www.w3.org/2001/ XMLSchema#string"><AttributeValue>kan</AttributeValue></Attribute>
</Subject>
<Resource>
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id " DataType="http://www.w3.org/2001/ XMLSchema#anyURI"><AttributeValue>http://perfsonar.net/MA</ AttributeValue></Attribute>
</Resource>
<Action>
<Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id " DataType="http://www.w3.org/2001/ XMLSchema#string"><AttributeValue>read</AttributeValue></Attribute>
</Action>
</Request>

The problem is that I don't know how I could add it inside a nmwg message. My choice is adding it inside a <nmwg:data> element (please, tell me if I'm wrong doing in this way). The thing is that I can get the String or the DOM Element but I didn't find a way to add it into a Message object.
Please, any help? any idea? :-)


A quick question, what is the overall purpose of this type of request? What would be the response to this? With some more context I could probably help suggest a fitting structure.

-jason





Archive powered by MHonArc 2.6.16.

Top of Page