Skip to Content.
Sympa Menu

shibboleth-dev - Re: CryptoHandleGenerator

Subject: Shibboleth Developers

List archive

Re: CryptoHandleGenerator


Chronological Thread 
  • From: Tom Scavo <>
  • To: Scott Cantor <>
  • Cc: Shibboleth Development <>
  • Subject: Re: CryptoHandleGenerator
  • Date: Mon, 14 Mar 2005 19:57:19 -0500
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=XSsYWud+5vGvRKqsRZDN9x8hzXhZ6Wcj9gBwWFfDua0TxZ/XRnYnrE8umriT8YD46m30fX5xd7K9DG6wrc80H5hz6/VfzGR871EoF/x/jKpT+dQrC6iHxQlYoUzG3YRdgYcE1gOiXKeLKXrX1J4kajl1sMKkpAsMx8fBGPQTkPE=

Yes, that makes sense, but I'm still wondering what the value of the
format attribute is:

<!-- SharedMemoryShibHandle -->
<NameMapping
xmlns="urn:mace:shibboleth:namemapper:1.0"
id="..."
format="urn:mace:shibboleth:1.0:nameIdentifier"
type="SharedMemoryShibHandle"
handleTTL="1800"/>

<!-- CryptoShibHandle -->
<NameMapping
xmlns="urn:mace:shibboleth:namemapper:1.0"
id="..."
format="..."
type="CryptoHandleGenerator"
handleTTL="1800"/>

In the second NameMapping element, what is the value of the format
attribue (which presumably is also the value of the Format attribute
of the corresponding SAML NameIdentifier element)?

Thanks,
Tom

On Mon, 14 Mar 2005 19:43:49 -0500, Scott Cantor
<>
wrote:
> > Where can I find an example of a NameMapping element of type
> > CryptoHandleGenerator? Specifically, what is the value of the format
> > attribute?
>
> The format attribute is the SAML visible part, it has nothing to do with how
> the handle is actually generated. The type attribute, however, is hardcoded
> to CryptoHandleGenerator to correspond to the class that implements that
> particular algorithm.
>
> The current design (which I think Walter may be changing) is that the Format
> attribute is used to find the right NameMapping element to use, and then the
> type in that tells the HS what class to use to generate the NameID.
>
> -- Scott
>
>



Archive powered by MHonArc 2.6.16.

Top of Page