JAAS installation for Shibboleth IdP

[Cantor, Scott]

On 7/8/14, 3:48 PM, "Marek Denis" <marek.denis at gmail.com> wrote:

>I was advised to use JAAS
>(http://shibboleth.net/pipermail/users/2013-October/012728.html), but
>is it really a full LDAP replacement?

JAAS is a framework for authentication, not a specific back-end. The LDAP
support in the V2 IdP uses JAAS.

> I can see I should be able to specify my flat file with
>username:password pairs but what about othe
>pieces of info so the SAML2 assertion can be built on top of them?

JAAS has nothing to do with the attribute layer no matter what back-ends
you use.

>There is really no way to avoid LDAP and do something really easy?

Depends what "something" is. If you want static data, you can use static
data connectors and generate anything you want. Or you can use scripts.
You can't create a system that contains varied data about users without a
way to store that data. But you can also use a database.

There's nothing special about LDAP and there's nothing in the IdP that
forces you to use LDAP or even favors it particularly. But there's still
no free lunch.

-- Scott