Testshib Dummy Users Email Attribute

[Antelmo Aguilar]

Hi again,

Kevin-I was able to accomplish what I wanted with the EPPN attribute you
mentioned (thanks).  I was able to use that attribute to set the e-mail
field for Gitlab accounts so that I can test if indeed my shibboleth
configuration for Gitlab was working.  So in my case, the mail attribute is
not necessary anymore.

Nate-I would still like to look into connecting the Shibboleth SP with a
local LDAP service in order to get more attributes than what the Shibboleth
Idp gives me.  I think being able to do this will help in the future for me
because I hope to have my Shibboleth SP talking to the university's
Shibboleth Idp.  I will not have much control on what attributes can be
given to me for the users because I do not manage the university's
Shibboleth Idp.  So having a local LDAP instance that my Shibboleth SP can
use to get more attributes for the users would really help me with
authorization .

By any chance do you guys know of instructions/tutorials that I can use to
help me get this set up.  LIke I mentioned before, all of the
instructions/tutorials I have found online involved configuring a
Shibboleth Idp with LDAP, not a Shibboleth SP.

Thank you both for your help.  I really appreciate it!

-Antelmo

On Tue, Jun 23, 2015 at 8:55 PM, Nate Klingenstein <ndk at internet2.edu>
wrote:

>   If the historical reference has no validity today then I don't mind
> changing things a bit. I'll visit that idea more tomorrow.
>
>
>  It probably doesn’t.  I’d just check the directory first, but I don’t
> think user entries were ever in the same path.
>
>  The other historical reason was that we didn’t want people to use email
> as an identifier.  "Mission accomplished" and “sorry", I guess.
>
>  As it is we do release eppn which, on testshib looks a lot like an email
> ;)
>
>
>  It does.  Today, I’d actually be in favor of releasing both so that we
> could highlight a difference, if you’d like to insert some random
> name at example.foo into the directory.  There should be nothing personally
> identifying left, but this would be a way to make sure of that...
>
>  ((once at the SP you can map what ever you want))
>
>
> Indeed, and this will work immediately.  I definitely don’t want to scare
> anyone else from this approach, as it will give you the most flexibility in
> the long run.
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150623/142b4bd4/attachment.html>