Shibboleth Developers

["Scott Cantor" <>]

> 2) We presently store data as group membership rather than
>     as individual attributes.  For example, if we have an LDAP
>     group of dorm residents:
> 
>          cn: Housing.dormer
>          member:  id=spud
>          member:  id=potato
>          ...
> 
>     we'd like to generate the "...napster:dorm" entitlement for anyone
>     in that group.  I realize 1.3 doesn't support this, but is it
>     in shib's future?  Is there other interest in this capability?

It supports it via attribute plugins. I'm not sure how else it could be
supported. I guess some kind of generic group query connector that results
in an entitlement?

-- Scott