Put breakpoints and follow the Shibboleth IDP

[Chad La Joie]

I don't know what to tell you.  It's a complex system.  Some of the
code is not structured as well as I wanted but even if it were you
aren't going to pick it up in a couple hours.  If you need a firm
understanding of SAML plus a particular IdP impl you should have
started your research a month or two ago.

On Thu, Aug 9, 2012 at 7:32 PM, Manisha Sinha <manishasinha70 at yahoo.com> wrote:
> I have spent the last few hours trying to get my through the code. I have
> not been able to figure out anything yet. I have worked with other open
> source (though smaller scale), and could understand most of the code. I
> understand that building an IDP is a complex project. Those who are working
> on it may not agree with me....but is there anyone (with not much experience
> with security and spring) who could get a good grasp of it quickly. If yes,
> please share your notes/thoughts.
>
> P.S: Please don't say that I need to put in more effort. I am not looking
> for a shortcut....just more inputs regarding the class/package/project
> structure, how different authentication mechanisms are handled, how the
> assertion is build, communication with SP..... I need to understand the IDP
> quickly so that I can use it in my project.
>
> Thanks
>
> From: Chad La Joie <lajoie at itumi.biz>
> To: Shib Dev <dev at shibboleth.net>
> Sent: Thursday, August 9, 2012 1:46 PM
>
> Subject: Re: Put breakpoints and follow the Shibboleth IDP
>
> No
>
> On Thu, Aug 9, 2012 at 4:46 PM, Manisha Sinha <manishasinha70 at yahoo.com>
> wrote:
>> Is there a document that describes the flow of control from one class to
>> another for different cases?
>>
>> From: Chad La Joie <lajoie at itumi.biz>
>> To: Shib Dev <dev at shibboleth.net>
>> Sent: Thursday, August 9, 2012 1:33 PM
>>
>> Subject: Re: Put breakpoints and follow the Shibboleth IDP
>>
>> Well, requests start at the profile handlers.  Probably the easiest
>> one is the Shibboleth SSO profile handler.  That's a request that
>> doesn't require a ton of upfront work to process and check.
>>
>> On Thu, Aug 9, 2012 at 4:29 PM, Manisha Sinha <manishasinha70 at yahoo.com>
>> wrote:
>>> Thanks Chad. I will try it.
>>>
>>> Also, can you suggest where is like the starting point/package of the
>>> idp?
>>> I
>>> have seen the java doc. It is quite a big project. I need to understand
>>> the
>>> flow in different cases. Is there a class diagram/document of how and
>>> when
>>> the classes and methods are called?Please help.
>>>
>>> From: Chad La Joie <lajoie at itumi.biz>
>>> To: Shib Dev <dev at shibboleth.net>
>>> Sent: Thursday, August 9, 2012 12:48 PM
>>> Subject: Re: Put breakpoints and follow the Shibboleth IDP
>>>
>>> Yeah, I've done it before to diagnose problems.  The IdP is just a
>>> webapp so just Google for how to perform remote debugging of webapps
>>> in Eclipse (may even be in the eclipse manual itself)
>>>
>>> On Thu, Aug 9, 2012 at 3:28 PM, Manisha Sinha <manishasinha70 at yahoo.com>
>>> wrote:
>>>> Hi All,
>>>>
>>>> I am trying to understand the code of Shibboleth IDP. I have downloaded
>>>> the
>>>> code from SVN and imported the project in Eclipse-STS. I also have a
>>>> idp.war
>>>> deployed on tomcat.
>>>>
>>>> I have found that the best way to understand a code is to put
>>>> breakpoints
>>>> and watch the flow of the code and also get an idea of what values are
>>>> being
>>>> passed. I have done this in the past where I have deployed my war file
>>>> on
>>>> tomcat, have the project in the Eclipse (actually it was MyEclipse and I
>>>> configured using MyEclipse externally launced Server in the Debug
>>>> settings
>>>> window) and then put breakpoints in the code. For example when a user
>>>> enters
>>>> the username and password and clicks Login button, the code would stop
>>>> at
>>>> the breakpoint where the authentication is done (assuming I have put a
>>>> breakpoint at the right place). I find this a very neat way to
>>>> debug/understand a web app.
>>>>
>>>> I want to do something similar to understand the IDP code. Has anyone
>>>> tried
>>>> this??
>>>>
>>>>
>>>> --
>>>> To unsubscribe from this list send an email to
>>>> dev-unsubscribe at shibboleth.net
>>>
>>>
>>>
>>> --
>>> Chad La Joie
>>> http://www.itumi.biz/
>>> trusted identities, delivered
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> dev-unsubscribe at shibboleth.net
>>>
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> dev-unsubscribe at shibboleth.net
>>
>>
>>
>> --
>> Chad La Joie
>> http://www.itumi.biz/
>> trusted identities, delivered
>> --
>> To unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net
>
>
>
> --
> Chad La Joie
> http://www.itumi.biz/
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered