Resolving Tomcat GenericPrincipal roles to attributes?

[Peter Schober]

* Nathan Mische <nmische at gmail.com> [2012-12-05 15:46]:
> We currently have a Shibboleth 2.5 IdP instance running on Tomcat 6

Jfyi, no such version exists. The latest IdP version is 2.3.8.

> I see that if we move to the external authentication login handler
> we should be able to attach the Tomcat principal to the httpRequest
> object we send back to the AuthenticationEngine, I'm just not sure
> if it is possible to then query that principal's roles in an
> attribute resolver.

I'm sure you can get at most anything in your container from within
the attribute resolver,
-peter