Canarie Installer suitability for Shib "quick start"?

Cantor, Scott cantor.2 at osu.edu
Mon Feb 27 12:09:33 EST 2017


> But, and FMIO, it raises one thing I have often wondered about: the AD
> world?  I have always installed AD in a very mindless manner
> but it did seem to me that there was some underlying trends in the LDAP
> layout that might be exploitable...

Yes, the schema is more consistent, but the assumption of what actual attributes are needed and what format they're in is where it falls apart. I would bet that the kinds of places we're talking about are also the ones who don't have eduPerson data in a readily consumable format and require shenanigans to get things into the form required, so even assuming that doesn't buy much.

-- Scott



More information about the dev mailing list