Shibboleth Developers

[Scott Cantor <>]

> If the eduperson arc is out, how about "*:attribute-name:cn" etc. since  
> we seem to agree that what these things like "cn" and "mail" are are  
> short names for attribute types (types in the X.520 sense).

After talking to Bob, the one that seemed the most agreeable to us was 
attribute-def, since he prefers attribute-type, and I prefer
attribute. "name" bothered me a little, since the URI isn't really 
representing just the name of an attribute but it's definition
and semantics in a particular context.

So we're looking at using a flat namespace of attribute-defs, with colons as 
the seperator.

urn:mace:dir:attribute-def:cn
urn:mace:dir:attribute-def:eduPersonPrincipalName

I think we would recomment others define attributes by registering a 
namespace with MACE, and then using
urn:mace:<namespace>:attribute-def:<name> or something similar, but obviously 
others may be less bothered by these religious
arguments and just pick something.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--