Passing information from Authentication Module to Resolvers

[cneberg]

Nice.  I hadn't thought of that. Could you give an example?

-Topher

On Mon, Aug 6, 2012 at 10:30 AM, Russell Beall <beall at usc.edu> wrote:
> I'm developing a simple custom principal to use for this, but instead of a custom resolver, I just use scripted attribute definitions from within the standard resolver config. That is an option, because the scriptlets are capable of understanding the custom principal type.
>
> Russ.
> (iPhone)
>
>
> On Aug 6, 2012, at 9:02 AM, cneberg <cneberg at gmail.com> wrote:
>
>> Here is an example of someone else using this method.    They create a
>> new attribute based on the user's IP address, hide it a custom
>> principal and then allow it to be exacted in the resolver.
>>
>> https://github.com/ukf/ua-attribute-idp-ext
>>
>> -Christopher
>>
>> On Mon, Aug 6, 2012 at 9:26 AM, Dergenski, Todd A. <TDergens at odu.edu> wrote:
>>> Hmm, I have not tried making a custom principal yet, but I have (miss)used
>>> the principal itself to move the information.  I will have to do some
>>> testing with that.
>>>
>>>
>>>
>>> Todd Dergenski
>>>
>>> Old Dominion University
>>>
>>> Senior Security Administrator
>>>
>>> 4700 Elkhorn Ave - Room 4300
>>>
>>> Norfolk, Va, 23529 USA
>>>
>>>
>>>
>>> (757) 683-4301
>>>
>>> tdergens at odu.edu
>>>
>>>
>>>
>>> From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
>>> Behalf Of Paul Hethmon
>>> Sent: Monday, August 06, 2012 11:15 AM
>>> To: Shib Dev
>>> Subject: Re: Passing information from Authentication Module to Resolvers
>>>
>>>
>>>
>>> Todd,
>>>
>>>
>>>
>>> What I've done for this is to create a custom principal and data resolver.
>>> So the login module stores the attributes as name/value pairs in the custom
>>> principal. The data resolver looks for principals of that type. If it finds
>>> that type, then it extracts the attributes and makes them available to the
>>> Shib engine.
>>>
>>>
>>>
>>> Paul
>>>
>>>
>>>
>>> From: <Dergenski>, "Todd A." <TDergens at odu.edu>
>>> Reply-To: Shibboleth Dev <dev at shibboleth.net>
>>> Date: Monday, August 6, 2012 11:06 AM
>>> To: Shibboleth Dev <dev at shibboleth.net>
>>> Subject: Passing information from Authentication Module to Resolvers
>>>
>>>
>>>
>>> Hello All:
>>>
>>>    I am in the processes of updating our custom login module and I was
>>> wondering if there was any way to pass a variable from the authentication
>>> module to the resolvers?  Something along the lines of user selects ‘Accept’
>>> on our login screen and then that value is stored like
>>> requestContext.getPrincipalName so the resolvers can pull one attribute over
>>> another.  I’ve taken a look at
>>> (https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition)
>>> and see several interfaces defined, but I don’t see anything that would
>>> grant access to the session cookies or any other store.
>>>
>>>
>>>
>>> Todd Dergenski
>>>
>>> Old Dominion University
>>>
>>> Senior Security Administrator
>>>
>>> 4700 Elkhorn Ave - Room 4300
>>>
>>> Norfolk, Va, 23529 USA
>>>
>>>
>>>
>>> (757) 683-4301
>>>
>>> tdergens at odu.edu
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> ________________________________
>>>
>>>
>>> Spam
>>> Not spam
>>> Forget previous vote
>>>
>>>
>>> --
>>> To unsubscribe from this list send an email to
>>> dev-unsubscribe at shibboleth.net
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net