Shibboleth Developers

Phone #:  (800) 541-1710
Pin #:  0142203

Hope  everyone had an enjoyable break, and holiday!

Agenda:

1) Current programming issues/questions

2) Quick review of items  to be included in the next release (I'll 
send email before the call).

3) Discussion exploring non web browser use cases. By the time of the 
call,  we should have in front of us use cases from three different 
applications areas:

-- grid (see email from Von:

        Date: Mon, 22 Dec 2003 13:59:23 -0600
        To: 

        Subject: More detailed Grid scenarios
        From: Von Welch 
<>

-- LionShare (email from me  later today)

-- jabber/XMPP (email from Peter Saint-Andre ).

The last time we discussed this topic, we seemed to be moving toward 
consensus on an approach that would have the client authenticate to a 
local service and obtain a cert (this process is very similar to the 
KX.509 and KCA developed by UMich). The cert would contain a url 
pointing back tot he AA.  The client would then use the cert to 
authenticate  to the target. The target would contact the Shib AA, 
presenting the cert as the user's identity.

We were still discussing whether the cert would contain the user's 
identity (KX.509 puts the user's kerberos principal in the subject 
field) or a Shib Handle  in the subject field. Or to support both.....