Configuring delegation plugin: rules/constraints/syntax problem in relying-party.xml

[Karla Borecky]

Thank you - that was very helpful. So do the sequences have to appear in
the order listed: for example

30 <sequence> 31 <element ref="rp:AnonymousRelyingParty" minOccurs="1"/> 32
<element ref="rp:DefaultRelyingParty" minOccurs="1"/> 33 <element ref=
"rp:RelyingParty" minOccurs="0" maxOccurs="unbounded"/> 34 <element ref=
"shibmd:MetadataProvider" minOccurs="0"/> 35 <element ref=
"security:Credential" minOccurs="0" maxOccurs="unbounded"/> 36 <element ref=
"security:TrustEngine" minOccurs="0" maxOccurs="unbounded"/> 37 <element
ref="security:SecurityPolicy" minOccurs="0" maxOccurs="unbounded"/> 38
</sequence>

the TrustEngines have to come before the SecurityPolicy-s? It see that the
TrustEngine elements contain references to Credential elements, and
SecurityPolicy elements refer to TrustEngines, but I wasn't sure if the
file was actually parsed in order like that, i.e. before you can refer to
X, it has to be defined 'above.' I know this is an obscure question. I hope
you don't mind too much.

thank you,
Karla

On Tue, Apr 24, 2012 at 3:50 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 4/24/12 1:57 PM, "Karla Borecky" <kborecky at smith.edu> wrote:
> >
> >Should the SecurityPolicy be nested under the TrustEngine element? Or
> >does the SecurityPolicy have to come first? Or none of the above?
>
> Schema is here:
>
> http://svn.shibboleth.net/view/java-shib-common/branches/REL_1/src/main/res
> ources/schema/shibboleth-2.0-relying-party.xsd?revision=979&view=markup
>
> RelyingPartyGroup is a sequence, and the elements have to be grouped, so
> all TrustEngines come before all SecurityPolicy elements.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Karla Borecky
Systems Administrator
ITS
Smith College
Northampton, MA 01063
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120425/c3a44da5/attachment-0001.html