Shibboleth Developers

[Scott Cantor <>]

FYI regarding testing, sunra is more or less out of whack right now, due to a 
test I'm working on of some fixes to Xerces that the
developers there worked on for me. They seem to have a major bug in the 2.3 
branch, so it's not working at all right this sec.

I have the new target code running on shib2 now, so the 
/shibboleth/sample.jsp script is available (with a valid-user rule).

Related note is that I've tightened up the AAP functionality a bit, added an 
<AnyValue> rule, and moved the aap-uri from the [shar]
to the [shire] section. For some technical reasons, it doesn't really work 
unless it's applied to the mod_shibrm processing stage
inside Apache, so it has to be a [shire] section command.

However, I also now apply the rules in that file to all attributes, even the 
scoped ones, so unless you list an attribute in the
policy file (with whatever rules needed), it will get filtered.

This means you have to define attributes to the target by adding at least 
this to the policy file (or not having one):

<AttributeRule Name="attribute name">
        <AnySite><AnyValue/></AnySite>
</AttributeRule>

We'll ship appropriate defaults in the distribution.

UTF-8 is working more or less now, except for regular expression rules in 
.htaccess, which get confused and break. I think it's
fixable with some work. I did get a literal rule to work by moving the file 
to Windows, saving it as UTF-8 in notepad with the
special character in it, and uploading back to Unix. So Apache can process a 
UTF-8 config file.

For the time being, shib2 origin is still sending m<e>mber with a special e 
character for my testing.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--