[java-identity-provider] branch main updated: Add additional properties to admin flow wiring.
Scott Cantor
cantor.2 at osu.edu
Fri Oct 23 16:10:25 UTC 2020
This is an automated email from the git hooks/post-receive script.
scantor pushed a commit to branch main
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=0eb4a9071523b39af3041b38a325009de9d35c75
The following commit(s) were added to refs/heads/main by this push:
new 0eb4a9071 Add additional properties to admin flow wiring.
0eb4a9071 is described below
commit 0eb4a9071523b39af3041b38a325009de9d35c75
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Oct 23 12:10:21 2020 -0400
Add additional properties to admin flow wiring.
---
.../net/shibboleth/idp/conf/admin-system.xml | 49 +++++++++++++++++-----
.../src/main/resources/conf/admin/admin.properties | 27 ++++++++++++
2 files changed, 65 insertions(+), 11 deletions(-)
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/admin-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/admin-system.xml
index c4eebb5c1..bb3496066 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/admin-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/admin-system.xml
@@ -27,55 +27,82 @@
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/status"
p:loggingId="%{idp.status.logging:Status}"
- p:policyName="%{idp.status.accessPolicy:AccessByIPAddress}" />
+ p:policyName="%{idp.status.accessPolicy:AccessByIPAddress}"
+ p:nonBrowserSupported="%{idp.status.nonBrowserSupported:false}"
+ p:authenticated="%{idp.status.authenticated:false}"
+ p:resolveAttributes="%{idp.status.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/reload-service-configuration"
p:loggingId="%{idp.reload.logging:Reload}"
- p:policyName="%{idp.reload.accessPolicy:AccessByIPAddress}" />
+ p:policyName="%{idp.reload.accessPolicy:AccessByIPAddress}"
+ p:nonBrowserSupported="%{idp.reload.nonBrowserSupported:false}"
+ p:authenticated="%{idp.reload.authenticated:false}"
+ p:resolveAttributes="%{idp.reload.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/reload-metadata"
p:loggingId="%{idp.reload.logging:Reload}"
- p:policyName="%{idp.reload.accessPolicy:AccessByIPAddress}" />
+ p:policyName="%{idp.reload.accessPolicy:AccessByIPAddress}"
+ p:nonBrowserSupported="%{idp.reload.nonBrowserSupported:false}"
+ p:authenticated="%{idp.reload.authenticated:false}"
+ p:resolveAttributes="%{idp.reload.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/resolvertest"
p:loggingId="%{idp.resolvertest.logging:ResolverTest}"
- p:policyName="%{idp.resolvertest.accessPolicy:AccessByIPAddress}" />
+ p:policyName="%{idp.resolvertest.accessPolicy:AccessByIPAddress}"
+ p:nonBrowserSupported="%{idp.resolvertest.nonBrowserSupported:false}"
+ p:authenticated="%{idp.resolvertest.authenticated:false}"
+ p:resolveAttributes="%{idp.resolvertest.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/mdquery"
p:loggingId="%{idp.mdquery.logging:MetadataQuery}"
- p:policyName="%{idp.mdquery.accessPolicy:AccessByIPAddress}" />
+ p:policyName="%{idp.mdquery.accessPolicy:AccessByIPAddress}"
+ p:nonBrowserSupported="%{idp.mdquery.nonBrowserSupported:false}"
+ p:authenticated="%{idp.mdquery.authenticated:false}"
+ p:resolveAttributes="%{idp.mdquery.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/metrics"
p:loggingId="%{idp.metrics.logging:Metrics}"
- p:policyNameLookupStrategy-ref="shibboleth.metrics.AccessPolicyStrategy" />
+ p:policyNameLookupStrategy-ref="shibboleth.metrics.AccessPolicyStrategy"
+ p:nonBrowserSupported="%{idp.metrics.nonBrowserSupported:false}"
+ p:authenticated="%{idp.metrics.authenticated:false}"
+ p:resolveAttributes="%{idp.metrics.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/hello"
p:loggingId="%{idp.hello.logging:Hello}"
p:policyName="%{idp.hello.accessPolicy:AccessByAdminUser}"
- p:authenticated="true"
- p:resolveAttributes="true" />
+ p:nonBrowserSupported="%{idp.hello.nonBrowserSupported:false}"
+ p:authenticated="%{idp.hello.authenticated:true}"
+ p:resolveAttributes="%{idp.hello.resolveAttributes:true}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/lockout-manager"
p:loggingId="%{idp.lockout.logging:Lockout}"
- p:policyName="%{idp.lockout.accessPolicy:AccessDenied}" />
+ p:policyName="%{idp.lockout.accessPolicy:AccessDenied}"
+ p:nonBrowserSupported="%{idp.lockout.nonBrowserSupported:false}"
+ p:authenticated="%{idp.lockout.authenticated:false}"
+ p:resolveAttributes="%{idp.lockout.resolveAttributes:false}" />
<bean parent="shibboleth.AdminFlow"
c:id="http://shibboleth.net/ns/profiles/storage"
p:loggingId="%{idp.storage.logging:Storage}"
- p:policyName="%{idp.storage.accessPolicy:AccessDenied}" />
+ p:policyName="%{idp.storage.accessPolicy:AccessDenied}"
+ p:nonBrowserSupported="%{idp.storage.nonBrowserSupported:false}"
+ p:authenticated="%{idp.storage.authenticated:false}"
+ p:resolveAttributes="%{idp.storage.resolveAttributes:false}" />
<bean parent="shibboleth.OneTimeAdminFlow"
c:id="http://shibboleth.net/ns/profiles/unlock-keys"
p:loggingId="%{idp.unlock.logging:UnlockKeys}"
p:policyName="%{idp.unlock.accessPolicy:AccessDenied}"
- p:authenticated="%{idp.unlock.authenticated:true}" />
+ p:nonBrowserSupported="%{idp.unlock.nonBrowserSupported:false}"
+ p:authenticated="%{idp.unlock.authenticated:true}"
+ p:resolveAttributes="%{idp.unlock.resolveAttributes:false}" />
<!-- Parent beans to default some of the flow boilerplate. -->
diff --git a/idp-conf/src/main/resources/conf/admin/admin.properties b/idp-conf/src/main/resources/conf/admin/admin.properties
index 2f1c0bf2e..dd695423d 100644
--- a/idp-conf/src/main/resources/conf/admin/admin.properties
+++ b/idp-conf/src/main/resources/conf/admin/admin.properties
@@ -2,27 +2,54 @@
#idp.status.logging = Status
#idp.status.accessPolicy = AccessByIPAddress
+#idp.status.authenticated = false
+#idp.status.nonBrowserSupported = false
+#idp.status.resolveAttributes = false
#idp.reload.logging = Reload
#idp.reload.accessPolicy = AccessByIPAddress
+#idp.reload.authenticated = false
+#idp.reload.nonBrowserSupported = false
+#idp.reload.resolveAttributes = false
#idp.resolvertest.logging = ResolverTest
#idp.resolvertest.accessPolicy = AccessByIPAddress
+#idp.resolvertest.authenticated = false
+#idp.resolvertest.nonBrowserSupported = false
+#idp.resolvertest.resolveAttributes = false
#idp.mdquery.logging = MetadataQuery
#idp.mdquery.accessPolicy = AccessByIPAddress
+#idp.mdquery.authenticated = false
+#idp.mdquery.nonBrowserSupported = false
+#idp.mdquery.resolveAttributes = false
#idp.metrics.logging = Metrics
+#idp.metrics.authenticated = false
+#idp.metrics.nonBrowserSupported = false
+#idp.metrics.resolveAttributes = false
+# See admin/metrics.xml for other configuration
#idp.hello.logging = Hello
#idp.hello.accessPolicy = AccessByAdminUser
+#idp.hello.authenticated = true
+#idp.hello.nonBrowserSupported = false
+#idp.hello.resolveAttributes = true
#idp.lockout.logging = Lockout
#idp.lockout.accessPolicy = AccessDenied
+#idp.lockout.authenticated = false
+#idp.lockout.nonBrowserSupported = false
+#idp.lockout.resolveAttributes = false
#idp.storage.logging = Storage
#idp.storage.accessPolicy = AccessDenied
+#idp.storage.authenticated = false
+#idp.storage.nonBrowserSupported = false
+#idp.storage.resolveAttributes = false
#idp.unlock.logging = UnlockKeys
#idp.unlock.accessPolicy = AccessDenied
#idp.unlock.authenticated = true
+#idp.unlock.nonBrowserSupported = false
+#idp.unlock.resolveAttributes = false
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list