[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/authn/password-authn-config.xml system/fl...

[noreply at shibboleth.net]

Author: scantor
Date: Wed Sep  9 11:23:19 2015
New Revision: 7736

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7736&view=rev
Log:
IDP-796 - Wire up option to retain password.

Modified:
    trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml

Modified: trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml?rev=7736&r1=7735&r2=7736&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml	(original)
+++ trunk/idp-conf/src/main/resources/conf/authn/password-authn-config.xml	Wed Sep  9 11:23:19 2015
@@ -27,6 +27,9 @@
     <util:constant id="shibboleth.authn.Password.Lowercase" static-field="java.lang.Boolean.FALSE"/>
     <util:constant id="shibboleth.authn.Password.Uppercase" static-field="java.lang.Boolean.FALSE"/>
     <util:constant id="shibboleth.authn.Password.Trim" static-field="java.lang.Boolean.TRUE"/>
+
+    <!-- Set to TRUE if you want the password kept in the resulting Subject as a private credential. -->
+    <util:constant id="shibboleth.authn.Password.RetainAsPrivateCredential" static-field="java.lang.Boolean.FALSE"/>
 
     <!-- Apply any regular expression replacement pairs before validation. -->
     <util:list id="shibboleth.authn.Password.Transforms">

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml?rev=7736&r1=7735&r2=7736&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-beans.xml	Wed Sep  9 11:23:19 2015
@@ -49,6 +49,7 @@
         
     <bean id="ValidateUsernamePasswordAgainstJAAS"
             class="net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS" scope="prototype"
+            p:savePasswordToCredentialSet="#{getObject('shibboleth.authn.Password.RetainAsPrivateCredential') != null ? getObject('shibboleth.authn.Password.RetainAsPrivateCredential') : false}"
             p:loginConfigNames-ref="shibboleth.authn.JAAS.LoginConfigNames" p:loginConfigType="JavaLoginConfig"
             p:addDefaultPrincipals="#{getObject('shibboleth.authn.Password.addDefaultPrincipals') != null ? getObject('shibboleth.authn.Password.addDefaultPrincipals') : true}"
             p:classifiedMessages-ref="shibboleth.authn.Password.ClassifiedMessageMap"
@@ -62,6 +63,7 @@
 
     <bean id="ValidateUsernamePasswordAgainstKerberos"
         class="net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstKerberos" scope="prototype"
+        p:savePasswordToCredentialSet="#{getObject('shibboleth.authn.Password.RetainAsPrivateCredential') != null ? getObject('shibboleth.authn.Password.RetainAsPrivateCredential') : false}"
         p:refreshKrb5Config-ref="shibboleth.authn.Krb5.RefreshConfig"
         p:preserveTicket-ref="shibboleth.authn.Krb5.PreserveTicket"
         p:servicePrincipal="#{getObject('shibboleth.authn.Krb5.ServicePrincipal')}"
@@ -78,6 +80,7 @@
 
     <bean id="ValidateUsernamePasswordAgainstLDAP"
         class="net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP" scope="prototype"
+        p:savePasswordToCredentialSet="#{getObject('shibboleth.authn.Password.RetainAsPrivateCredential') != null ? getObject('shibboleth.authn.Password.RetainAsPrivateCredential') : false}"
         p:authenticator-ref="shibboleth.authn.LDAP.authenticator"
         p:addDefaultPrincipals="#{getObject('shibboleth.authn.Password.addDefaultPrincipals') != null ? getObject('shibboleth.authn.Password.addDefaultPrincipals') : true}"
         p:classifiedMessages-ref="shibboleth.authn.Password.ClassifiedMessageMap"