Shibboleth Developers

["Mark Wilcox" <>]

Oh right.

I think I remember that thread :).

Mark

-----Original Message-----
From: Scott Cantor 
[mailto:]
 
Sent: Monday, November 03, 2003 3:46 PM
To: 'Mark Wilcox'
Cc: 'Shibboleth Dev Team'
Subject: RE: Java and general target stuff

> I think what we should be aiming more for is the JAAS 
> specification. JAAS is the Java specification that deals 
> specifically with Authentication and Authorization. It's 
> designed to be fairly generic (in many ways it resembles
> PAM) and provides a method called "login" that you override 
> to do your authentication step. 

We've explored JAAS without being sure it adds much value. Are you folks
using it for authorization or just authentication?

I don't think a JAAS plugin to do authentication with Shib is a big deal,
but using solely JAAS to expose our functionality seems unlikely.

-- Scott