shibboleth-dev - Re: Setting user attributes
Subject: Shibboleth Developers
List archive
- From: Walter Hoehn <>
- To: "Shahzad Younas" <>
- Cc: <>
- Subject: Re: Setting user attributes
- Date: Wed, 6 Apr 2005 13:12:17 -0500
This IdP doesn't store any data about users and depends on a separate storage technology (usually ldap) to provide attribute data. Attribute data is supplied to the IdP through Data Connectors that plug into the attribute resolver (configured in resolver.xml). If this is just for testing, it should be fairly easy to edit the sample data connector to hardcode any data that you'd like to send over the wire. Take a look at "edu.internet2.middleware.shibboleth.aa.attrresolv.provider.SampleConnec tor".
-Walter
On Apr 6, 2005, at 10:35 AM, Shahzad Younas wrote:
Hi,
I am playing with the default installation of Shibb target and origin. I
have made it so you have to enter username "test" into the HS for it to log
in. How/where (in the default installation) can I set the attributes for
this "test" user.
I am just playing around with Shibboleth - i know attributes can come from
an LDAP server, but I was just wondering where I can quickly define them
JUST for this test user.
When i manually send a AQM to the AA, only one attribute is returned
(below). I want to set the attributes returned for a SINGLE resource and
user - just for testing purposes.
Thanks!
Shahzad
<Response xmlns="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
InResponseTo="aaf23196-1773-2113-474a-fe114412ab72"
IssueInstant="2005-04-06T14:11:40.734Z" MajorVersion="1" MinorVersion="1"
ResponseID="a3cc37265ae2fc4761144a1ef87190d4">
<Status>
<StatusCode Value="samlp:Success">
</StatusCode>
</Status>
<Assertion xmlns="urn:oasis:names:tc:SAML:1.0:assertion"
AssertionID="f7bdd175dbe7a0e5f9b9b646f8f97b44"
IssueInstant="2005-04-06T14:11:40.734Z"
Issuer="https://example.org/shibboleth/origin" MajorVersion="1"
MinorVersion="1">
<Conditions NotBefore="2005-04-06T14:11:40.734Z"
NotOnOrAfter="2005-04-06T14:41:40.734Z">
<AudienceRestrictionCondition>
<Audience>https://example.org/shibboleth/target</Audience>
</AudienceRestrictionCondition>
</Conditions>
<AttributeStatement>
<Subject>
<NameIdentifier Format="urn:mace:shibboleth:1.0:nameIdentifier"
NameQualifier="https://example.org/shibboleth/origin">21f60480-eef8 -49cc-ade
d-11a211cb4fe8</NameIdentifier>
</Subject>
<Attribute xmlns:typens="urn:mace:shibboleth:1.0"
AttributeName="urn:mace:dir:attribute-def:eduPersonAffiliation"
AttributeNamespace="urn:mace:shibboleth:1.0:attributeNamespace:uri">
<AttributeValue
xsi:type="typens:AttributeValueType">member</AttributeValue>
</Attribute>
</AttributeStatement>
</Assertion>
</Response>
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
- Setting user attributes, Shahzad Younas, 04/06/2005
- Re: Setting user attributes, Walter Hoehn, 04/06/2005
- Re: Setting user attributes, Tom Scavo, 04/06/2005
- RE: Setting user attributes, Scott Cantor, 04/06/2005
- Re: Setting user attributes, Tom Scavo, 04/06/2005
- Re: Setting user attributes, Walter Hoehn, 04/06/2005
Archive powered by MHonArc 2.6.16.