Shibboleth Developers

[Scott Cantor <>]

I just checked in a new attribute definition plugin for creating the salted
persistent ID we discussed in Boulder. I haven't tested it yet, but we
should be able to include it in 1.0.1.

Walter, you should probably take a look at it, since I was guessing how to
build this. Steven said you might already have one, but I wanted to try it
anyway to start learning how to do this, so we can plug in whatever changes
you think are appropriate.

It supports a single optional dependency on an attribute, or on a connector
with a sourceName defining the LDAP attribute to use as the per-principal
ID. Otherwise it just uses the principal name. The requester name and a salt
key are SHA-1 hashed and base64'd to produce the value.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--