Skip to Content.
Sympa Menu

shibboleth-dev - Re: Shibboleth 1.3 ARP Rule Constraint patch (v4)

Subject: Shibboleth Developers

List archive

Re: Shibboleth 1.3 ARP Rule Constraint patch (v4)


Chronological Thread 
  • From: Brendan Bellina <>
  • To:
  • Subject: Re: Shibboleth 1.3 ARP Rule Constraint patch (v4)
  • Date: Tue, 16 May 2006 11:37:40 -0700

The difference is that v4 was built against the release version of Shibboleth 1.3. Version 3 was not. There were no other changes.

For right now this is a patch we are offering to the community. I don't know what is involved in getting it to be adopted into the official release. We are not averse to that happening though. There has been some discussion between Will Norris, Walter Hoehn, and myself as to whether there is benefit in altering the syntax to distinguish it somewhat from attribute release syntax, just to avoid possible confusion, but no decision has been reached.

Brendan

On May 16, 2006, at 1:56 AM, Philip Brusten wrote:

Hello

what are the major changes between v3 and v4?
Is it possible to mention the changes of the patch between different version numbers?

Will this patch be adapted in the official release of shibboleth-idp?

Thanks again for the patch, it was just what we were looking for.

Philip



Brendan Bellina wrote:
v4 was uploaded yesterday. It was built against the release version of 1.3.

Regards,

Brendan

On Apr 19, 2006, at 6:57 PM, Brendan Bellina wrote:

USC has completed development and testing of a patch for Shibboleth 1.3 that allows ARP's to be constrained by user attributes. The intent is to allow Identity Providers to constrain the unneeded or undesired release of attributes to service providers. A white paper describing what we have named "Rule Constraints" and the patch code is available at the website <http://isd.usc.edu/~bbellina/gds/software/shibboleth/>. Will Norris, who authored the patch, will be attending the Shib WG session at the upcoming I2 Member Meeting and will be available to answer any questions. We hope that this will prove to be a useful offering to the Shibboleth community and welcome any feedback.

Regards,

Brendan Bellina


On Apr 10, 2006, at 9:31 AM,

wrote:

We are actively looking into enhancing the ARP Resolver to allow a release constaint to be defined in the ARP. We intend to use it primarily with edupersonEntitlement but it should work for any attribute. We hope to have something to announce (or at the least discuss specifically) by the I2 Member meeting.

Regards,

Brendan Bellina
USC



--
Brusten Philip
LUDIT - K.U.Leuven
http://shib.kuleuven.be
W. de Croylaan 52A | 3001 Heverlee | Belgium


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm





Archive powered by MHonArc 2.6.16.

Top of Page