[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/saml-nameid.properties system/conf/saml-n...

noreply at shibboleth.net noreply at shibboleth.net
Sun May 24 15:50:59 EDT 2015


Author: scantor
Date: Sun May 24 15:50:59 2015
New Revision: 7533

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7533&view=rev
Log:
IDP-729 - Add a property for turning off use of unfiltered attributes in persistent ID generator

Modified:
    trunk/idp-conf/src/main/resources/conf/saml-nameid.properties
    trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml

Modified: trunk/idp-conf/src/main/resources/conf/saml-nameid.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/saml-nameid.properties?rev=7533&r1=7532&r2=7533&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/saml-nameid.properties	(original)
+++ trunk/idp-conf/src/main/resources/conf/saml-nameid.properties	Sun May 24 15:50:59 2015
@@ -13,6 +13,7 @@
 
 # Otherwise for computed PersistentIDs set the source attribute and salt.
 #idp.persistentId.sourceAttribute = changethistosomethingreal
+#idp.persistentId.useUnfilteredAttributes = true
 # Do *NOT* share the salt with other people, it's like divulging your private key.
 #idp.persistentId.salt = changethistosomethingrandom
 #idp.persistentId.algorithm = SHA

Modified: trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml?rev=7533&r1=7532&r2=7533&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/conf/saml-nameid-system.xml	Sun May 24 15:50:59 2015
@@ -27,6 +27,7 @@
 
     <bean id="shibboleth.SAML2PersistentGenerator" lazy-init="true"
             class="net.shibboleth.idp.saml.nameid.impl.PersistentSAML2NameIDGenerator"
+            p:useUnfilteredAttributes="%{idp.persistentId.useUnfilteredAttributes:true}"
             p:persistentIdGenerator-ref="%{idp.persistentId.generator:shibboleth.ComputedPersistentIdGenerator}">
         <property name="attributeSourceIds">
             <bean parent="shibboleth.CommaDelimStringArray" c:_0="%{idp.persistentId.sourceAttribute:}" />



More information about the commits mailing list