Forward compatible changes to V3 custom schemas
Rod Widdowson
rdw at steadingsoftware.com
Sat Jul 5 09:00:05 EDT 2014
For the record:
Following conversations this week I have made the following changes to our
schemas
In the SAML Filter Schema (urn:mace:shibboleth:2.0:afp:mf:saml /
shibboleth-afp-mf-saml.xsd)
The following aliases are introduced (and we issue an INFO message if we see
the old style):
EntityAttributeExactMatch aliases
AttributeRequesterEntityAttributeExactMatch
EntityAttributeRegexMatchis aliases AttributeRequester
EntityAttributeRegexMatch
NameIDFormatExactMatch aliases
AttributeRequesterNameIDFormatExactMatch
InEntityGroup aliases AttributeRequesterInEntityGroup
RequestedAttributeInMetadata aliases AttributeInMetadata
RegistrationAuthority replaces
AttributeRequesterRegistrationAuthority (which first appeared in the Alpha)
In the Security Schema (urn:mace:shibboleth:2.0:security /
shibboleth-security.xml):
The three, not previously implemented, ResourceBacked Credential or
ValidationInfo types are now implemented and take a SPRING resource (with
the defauklt being to file: as per the rest of our configuration).
X509ResourceBacked (Credential)
BasicResourceBacked (Credential)
PKIXResourceBacked (ValidationInfo)
The 3 Filesystem homologs are still implemented, but because they are edge
cases and are also 100% config. compatible with the ResourceBacked versions
they are deprecated and a WARN is issued.
The only question arising is how to document this.
I can enter JIRA cases for these changes, or I can amend the Alpha
Documentation with a "In all releases after the first Alpha" note. Both are
not unprecedented, but I rather prefer the latter to the former (since my
95% prediction is that the Alpha documentation is going to morph into the
real documentation).
/Rod
More information about the dev
mailing list