Passing information from Authentication Module to Resolvers

[Dergenski, Todd A.]

Hmm, I have not tried making a custom principal yet, but I have (miss)used the principal itself to move the information.  I will have to do some testing with that.

Todd Dergenski
Old Dominion University
Senior Security Administrator
4700 Elkhorn Ave - Room 4300
Norfolk, Va, 23529 USA

(757) 683-4301
tdergens at odu.edu<mailto:tdergens at odu.edu>

From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On Behalf Of Paul Hethmon
Sent: Monday, August 06, 2012 11:15 AM
To: Shib Dev
Subject: Re: Passing information from Authentication Module to Resolvers

Todd,

What I've done for this is to create a custom principal and data resolver. So the login module stores the attributes as name/value pairs in the custom principal. The data resolver looks for principals of that type. If it finds that type, then it extracts the attributes and makes them available to the Shib engine.

Paul

From: <Dergenski>, "Todd A." <TDergens at odu.edu<mailto:TDergens at odu.edu>>
Reply-To: Shibboleth Dev <dev at shibboleth.net<mailto:dev at shibboleth.net>>
Date: Monday, August 6, 2012 11:06 AM
To: Shibboleth Dev <dev at shibboleth.net<mailto:dev at shibboleth.net>>
Subject: Passing information from Authentication Module to Resolvers

Hello All:
    I am in the processes of updating our custom login module and I was wondering if there was any way to pass a variable from the authentication module to the resolvers?  Something along the lines of user selects 'Accept' on our login screen and then that value is stored like requestContext.getPrincipalName so the resolvers can pull one attribute over another.  I've taken a look at (https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition) and see several interfaces defined, but I don't see anything that would grant access to the session cookies or any other store.

Todd Dergenski
Old Dominion University
Senior Security Administrator
4700 Elkhorn Ave - Room 4300
Norfolk, Va, 23529 USA

(757) 683-4301
tdergens at odu.edu<mailto:tdergens at odu.edu>



________________________________

Spam<https://www.spamtrap.odu.edu/b.php?i=691327964&m=9d988bda6133&t=20120806&c=s>
Not spam<https://www.spamtrap.odu.edu/b.php?i=691327964&m=9d988bda6133&t=20120806&c=n>
Forget previous vote<https://www.spamtrap.odu.edu/b.php?i=691327964&m=9d988bda6133&t=20120806&c=f>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120806/683a43ad/attachment-0001.html