Skip to Content.
Sympa Menu

shibboleth-dev - Re: [Shib-Dev] How enable a DataConnector to get all attribute definitions

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] How enable a DataConnector to get all attribute definitions


Chronological Thread 
  • From: Markus Ludwig Grandpre <>
  • To:
  • Subject: Re: [Shib-Dev] How enable a DataConnector to get all attribute definitions
  • Date: Mon, 20 Apr 2009 15:14:04 +0200

I wonder how the Shibboleth2 LdapDataConnector gains access to any AttributeDefinition object that declares a reference/dependency to this connector e.g.

<resolver:AttributeDefinition
id="eduPersonEntitlement"
...
<resolver:Dependency ref="myLDAP" />

whereby the DataConnector of the LdapDataConnector does not
declare any dependency to AttributeDefinitions at all:

<resolver:DataConnector
id="myLDAP"
xsi:type="LDAPDirectory"
xmlns="urn:mace:shibboleth:2.0:resolver:dc"
...
</resolver:DataConnector>

I've followed the LdapDataConnector implementation and used parts of it for my own DataConnector implementation, but getting null values all the time.

What went wrong?

Markus


Chad La Joie wrote:
A plugin only has access to its dependencies, not those things which
depend on it.

What you have now is still not right. Either eduPerson* depends on your
data connector or you data connector depends on them. The attribute
resolver has code in it that protects it from cyclic dependencies
causing any damage to the system but you probably won't get the results
you're looking for like this.

Markus Ludwig Grandpre wrote:
So

<resolver:Dependency ref="myShibboleth" /> (AttributeDefinition)

and

<resolver:DataConnector id="myShibboleth" ... />

are not sufficient to retrieve all referenced AttributeDefiniton objects?

Okay then, I will try something like this:

<resolver:AttributeDefinition
id="eduPersonPrincipalName"
...
<resolver:Dependency ref="myShibboleth" />
...
</resolver:AttributeDefinition>

<resolver:AttributeDefinition
id="eduPersonEntitlement"
...
<resolver:Dependency ref="myShibboleth" />
...
</resolver:AttributeDefinition>


<resolver:DataConnector
id="myShibboleth"
xsi:type="MyShibbolethDataConnector"
xmlns="urn:mace:unikn:shibboleth:resolver"
...
<resolver:Dependency ref="eduPersonPrincipalName" />
<resolver:Dependency ref="eduPersonEntitlement"/>
...
</resolver:DataConnector>

Will this do?

Markus


Chad La Joie wrote:
Yes, that is your data connector, and as I said, there are no
dependencies defined.

Markus Ludwig Grandpre wrote:
All right, but what config snippet do you mean? This one:

<resolver:DataConnector
id="myShibboleth"
xsi:type="MyShibbolethDataConnector"
xmlns="urn:mace:unikn:shibboleth:resolver"
attr1="test"/>

??

Markus

Chad La Joie wrote:
Right, if you don't define any dependencies then, when you ask for the
dependencies you get a null set. In the config snippet you sent you
are
not defining any dependencies so this would be the expected behavior.

Markus Ludwig Grandpre wrote:
There's a problem with dependencies. If I try to get them, null is
returned:




Archive powered by MHonArc 2.6.16.

Top of Page