Reading shibboleth IdP configuration from database
Nanda Kumar
NKK at FISCHERINTERNATIONAL.COM
Thu Dec 17 14:55:24 EST 2015
Hi Rod,
In order to fetch the attribute filter from the DB, I modify the service.xml to define the bean that does the read from DB
<bean id="relyingPartySerializer" class="com.example.RelyingPartySerializerFromDB"/>
And then point to the bean from the RelyingPartyResolverResources like so:
<util:list id="shibboleth.RelyingPartyResolverResources">
<ref bean=" relyingPartySerializer"/>
<value>%{idp.home}/conf/credentials.xml</value>
<value>%{idp.home}/system/conf/relying-party-system.xml</value>
</util:list>
In this case the relying party configuration will be provided by the serializer in xml format. Will the other two , the credentials and relying-party-system.xml will continue to be read from file?
Thanks
Nanda
======================================================================
CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is for the sole use of the intended recipient and may contain originating company confidential or proprietary information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, immediately contact the sender by reply e-mail or notify the postmaster at fisc.com and destroy all copies.
-----Original Message-----
From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Thursday, November 12, 2015 9:09 AM
To: 'Shib Dev'
Subject: RE: Reading shibboleth IdP configuration from database
> 1. I define three different DBResources one each for relying party,
attribute
> resolver and attribute filter implementing the
> org.springframework.core.io.Resource interface and possibly the
> net.shibboleth.utilities.java.support.resource.Resource interface.
Or one resource and use configuration to make the three different values.
> 2. These three resources will be beans defined in services.xml file
> with
three
> unique ids.
Yup.
> 3. The p:serviceConfigurations-ref attribute of the beans(services)
> shibboleth.AttributeResolverService, shibboleth.AttributeFilterService and
> shibboleth.RelyingPartyResolverService ( in the file
services-system.xml) will
> point to the three DBResources respectively.
You shouldn't have to edit any of the system files. You want to edit the definitions of these beans in service.xml to add your resources. Instead
<value>whatever</value>
Do
<ref>whatever</ref>
--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
More information about the dev
mailing list