Shibboleth Developers

["Russell J. Yount" <>]

I have a couple issues I would like to throw out for discussion tomorrow.

1.) How does a failure of one or more backend services being queried
    by an attribute method affect AA response?  Eg.
   If the AA needs to query  an LDAP server to determine an attribute value
   and the LDAP server  is not available what should the AA provide in the 
response?
       a.) should it just return the attributes which methods succeeded?
       b.) should it just return an error condition with no attributes at 
all?

2.) Any UI will need a method of generating all possible attributes to 
provide
    a friendly interface. I assume we need to build an API to enumerate all
    possible attributes there are methods for. Comments?

3.) What should be the maximum number of attributes assumed to be?
    (just the order of magnitude we should implement for)

4.) What is the syntax that will identify an authenticated user?

-Russ

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

   http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--