PathRegex Question

Cantor, Scott cantor.2 at
Tue Apr 1 14:37:48 EDT 2014

On 4/1/14, 2:01 PM, "Johnson, Jacob (GE, Intelligent Platforms)"
<Jacob.Johnson at> wrote:
>I want to exclude a single file in my application from being protected by
>SSO.  My ideas is to use <PathRegex> in shibboleth.xml to do this.

Unless you can't just use nested Path elements, I would avoid that. Using
a regex just introduces a lot of complexity you can usually avoid. I guess
the problem would be if the single file isn't just one file, but a whole
set of filenames that can live in many directories.

>This results in nothing being SSO protected:

I can tell you for sure that using a lot of advanced syntax is a
non-starter. The regexp dialect supported is undocumented by Xerces, but
not anything close to what Java, Perl, etc. would handle.

So in your specific case, I doubt you'd be successful doing this with a
regex, which is probably more important to your goal.

-- Scott

More information about the users mailing list