shibboleth-dev - Re: Constrained delegation with additional attributes

Subject: Shibboleth Developers

List archive

Re: Constrained delegation with additional attributes

From: Tom Scavo <>
To: Scott Cantor <>
Cc:
Subject: Re: Constrained delegation with additional attributes
Date: Tue, 22 Nov 2005 17:15:35 -0500
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Mwzb7y2r/yDkSoGrKtMyc38kCjp4R+LiSZ0XFsydyssbakVM6hYXWr28a4h793ma4TjNdd4OycsRbB9fA57dyzuvEdu0s60j+XjDVDh1hl4ZtE9TxW6bbUJTJM1d6IQv1Wpn7FLJj/I1KKuNgvhH0xZYFbHzHUI06V6iJjdTEpU=

On 11/22/05, Scott Cantor
<>
wrote:
>
> > So is there no way for SPa to communicate to SPb the home location of the
> > Subject of the Assertions? Or will SPb know it from it's metadata?
>
> I would think so, why wouldn't it? It's not a question of "home" anyway. I
> don't know what the relationship of the subject to the issuer is, and I
> don't really need to, but if I want to know where somebody's AA is, I can
> find out any number of ways.

Sorry, I'm missing something. If you don't assume the subject and
issuer are related, how do you determine the AA endpoint location?

Tom

RE: Constrained delegation with additional attributes, (continued)

List archive

Re: Constrained delegation with additional attributes