Decrypting attributes on-the-fly

[Cantor, Scott]

On 2/6/14, 11:17 PM, "Griffin Cheng [CLIB]" <cscheng at cpce-polyu.edu.hk>
wrote:

>I am reading Mr. Koranda¹s link to writing custom plugin.  I have a
>question. Since Shibboleth 2.5 (the institution here is running 2.5.3)
>has a ³sessionHook² option.  I am not sure if this would work since I am
>decryption the attribute value after a Shibboleth session has been
>created.

You could use the hook to decrypt it, but there is no way to feed that
back and it can have no effect on REMOTE_USER.

> 
>Sorry if I begin to sound like taking shortcut at every corner here.

Your best shortcut is to write an Apache module rather than extend the SP.
You'll have a much easier time of it.

-- Scott