modularize attribute bundles in an AttributeFilterPolicy?

[cneberg]

Can you use an xml entity in config files?  If so that might solve the cut
and paste issue.

Christopher

On Friday, February 26, 2016, Baron Fujimoto <baron at hawaii.edu> wrote:

> On Fri, Feb 26, 2016 at 09:43:50AM -0000, Rod Widdowson wrote:
> >> Is there a way to make an IdP AttributeFilterPolicy more modular by
> >> defining a named attribute bundle and then incorporating and possibly
> >> supplementing it in a particular AttributeFilterPolicy?
> >
> >I see exactly what you mean (and why) but No.
> >
> >The (implied) namespaces for attributes are already complicated enough
> that
> >I wouldn't want to add them.
> >
> >For completeness I'll mention that the attribute filter language does have
> >hooks to allow PolicyRequirementRules to be shared, but it was only (badly
> >&) partially implemented in V2 and we have withdrawn support in V3 (it
> turns
> >out that the semantics become almost impossible).
> >
> >So I'm afraid that cut & paste is your friend.
> >If you feel strongly you could pop in an RFE to make PolicyRequirementRef
> >work.  But it may well be a breaking change (at the edges) and so that
> would
> >need to wait for 4.0.
>
> Ok, thanks. I mainly wanted to make sure I wasn't missing an opportunity
> to factor this out and perhaps simplify the configs. I think it would be
> useful, for all the usual reasons you might want to factor something like
> that out, but understand if it's not cards for the foreseeable future.
>
> -baron
> --
> Baron Fujimoto <baron at hawaii.edu <javascript:;>> :: UH Information
> Technology Services
> minutas cantorum, minutas balorum, minutas carboratum desendus pantorum
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net <javascript:;>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160226/22498a73/attachment.html>