Resolving Tomcat GenericPrincipal roles to attributes?

[Nathan Mische]

On Wed, Dec 5, 2012 at 9:56 AM, Peter Schober <peter.schober at univie.ac.at>wrote:

> * Nathan Mische <nmische at gmail.com> [2012-12-05 15:46]:
> > We currently have a Shibboleth 2.5 IdP instance running on Tomcat 6
>
> Jfyi, no such version exists. The latest IdP version is 2.3.8.
>

Ah, yes sorry 2.3.8. I've also been doing a lot of work with our SPs which
are 2.5.0.


>
> > I see that if we move to the external authentication login handler
> > we should be able to attach the Tomcat principal to the httpRequest
> > object we send back to the AuthenticationEngine, I'm just not sure
> > if it is possible to then query that principal's roles in an
> > attribute resolver.
>
> I'm sure you can get at most anything in your container from within
> the attribute resolver,
> -peter
>

Would this require a custom Java or do you think it could be done in the
XML config?


> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>

Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121205/92357545/attachment.html