[java-identity-provider COMMIT] in /trunk/idp-authn-impl/src/main/resources/flows: authn-flow-descriptors.xml ipaddre...
noreply at shibboleth.net
noreply at shibboleth.net
Wed Aug 28 13:21:00 EDT 2013
Author: scantor
Date: Wed Aug 28 13:21:00 2013
New Revision: 4733
URL: http://svn.shibboleth.net/view/java-identity-provider?rev=4733&view=rev
Log:
Added remoteuser flow and additional comments.
Added:
trunk/idp-authn-impl/src/main/resources/flows/remoteuser-authn-beans.xml (with props)
trunk/idp-authn-impl/src/main/resources/flows/remoteuser-authn-flow.xml (with props)
Modified:
trunk/idp-authn-impl/src/main/resources/flows/authn-flow-descriptors.xml
trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-beans.xml
trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-flow.xml
trunk/idp-authn-impl/src/main/resources/flows/subject-c14n-beans.xml
Modified: trunk/idp-authn-impl/src/main/resources/flows/authn-flow-descriptors.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-impl/src/main/resources/flows/authn-flow-descriptors.xml?rev=4733&r1=4732&r2=4733&view=diff
==============================================================================
--- trunk/idp-authn-impl/src/main/resources/flows/authn-flow-descriptors.xml (original)
+++ trunk/idp-authn-impl/src/main/resources/flows/authn-flow-descriptors.xml Wed Aug 28 13:21:00 2013
@@ -18,21 +18,17 @@
<util:list id="AvailableAuthenticationFlows">
<!--
- <value>
- <bean c:id="AuthenticationFlow/IPAddress" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
- p:passiveAuthenticationSupported="true"
- p:forcedAuthenticationSupported="false"
- p:lifetime="60000" p:inactivityTimeout="0">
- <prop name="supportedPrincipals">
- <list>
- <value>
- <bean class="net.shibboleth.idp.saml.authn.AuthnContextClassRefPrincipal"
- c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol" />
- </value>
- </list>
- </prop>
- </bean>
- </value>
+ <bean c:id="AuthenticationFlow/IPAddress" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+ p:passiveAuthenticationSupported="true"
+ p:forcedAuthenticationSupported="false"
+ p:lifetime="PT60S" p:inactivityTimeout="0">
+ <property name="supportedPrincipals">
+ <list>
+ <bean class="net.shibboleth.idp.saml.authn.AuthnContextClassRefPrincipal"
+ c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol" />
+ </list>
+ </property>
+ </bean>
-->
</util:list>
Modified: trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-beans.xml?rev=4733&r1=4732&r2=4733&view=diff
==============================================================================
--- trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-beans.xml (original)
+++ trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-beans.xml Wed Aug 28 13:21:00 2013
@@ -14,20 +14,18 @@
<bean id="ExtractUserAgentAddress" class="net.shibboleth.idp.authn.impl.ExtractUserAgentAddress" scope="prototype" />
<bean id="ValidateUserAgentAddress" class="net.shibboleth.idp.authn.impl.ValidateUserAgentAddress" scope="prototype"
- p:principalName="jdoe" p:designatedRanges-ref="AddressRangesToValidate" />
-
- <!-- Address range(s) to allow are specified in the list below. -->
-
- <util:list id="AddressRangesToValidate">
- <value>
- <bean class="net.shibboleth.utilities.java.support.net.IPRange" factory-method="parseCIDRBlock" c:cidrBlock="127.0.0.1/32" />
- </value>
- </util:list>
+ p:principalName="jdoe">
+ <property name="designatedRanges">
+ <list>
+ <bean class="net.shibboleth.utilities.java.support.net.IPRange" factory-method="parseCIDRBlock" c:cidrBlock="127.0.0.1/32" />
+ </list>
+ </property>
+ </bean>
<!--
- You can add additional range lists and ValidateUserAgentAddress bean definitions
- if you want to map different ranges to different users. Just give the bean(s) different
- ids and wire them in sequence into the ipaddress-authn-flow.xml file.
+ You can add additional ValidateUserAgentAddress bean definitions if you want to map
+ different ranges to different users. Just give the bean(s) different ids and wire them
+ in sequence into the ipaddress-authn-flow.xml file.
-->
</beans>
Modified: trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-impl/src/main/resources/flows/ipaddress-authn-flow.xml?rev=4733&r1=4732&r2=4733&view=diff
==============================================================================
[... 26 lines stripped ...]
More information about the commits
mailing list