Shibboleth Developers

["Mark Wilcox" <>]

Hit send too quick.

We're just doing JAAS for authentication at the moment. But depending upon
what was in the data from the origin, we could sort of mimic authorization
via the system integration APIs.

Mark

-----Original Message-----
From: Scott Cantor 
[mailto:]
 
Sent: Monday, November 03, 2003 3:46 PM
To: 'Mark Wilcox'
Cc: 'Shibboleth Dev Team'
Subject: RE: Java and general target stuff

> I think what we should be aiming more for is the JAAS 
> specification. JAAS is the Java specification that deals 
> specifically with Authentication and Authorization. It's 
> designed to be fairly generic (in many ways it resembles
> PAM) and provides a method called "login" that you override 
> to do your authentication step. 

We've explored JAAS without being sure it adds much value. Are you folks
using it for authorization or just authentication?

I don't think a JAAS plugin to do authentication with Shib is a big deal,
but using solely JAAS to expose our functionality seems unlikely.

-- Scott