Context Check Intercept

Craig Pluchinsky craigp at iup.edu
Thu Jan 28 15:15:15 EST 2016


I accomplished what I was looking for but wanted to verify that I'm doing 
it correctly...Not too familiar with this piece of the IDP.

I wrote a script that will search the list of subjects from the subject 
context for the string I want to match on.  Seems that one of the subject 
values will always be org.ldaptive.jaas.LdapPrincipal followed by the DN. 
Will this always be available for the life of the session and does this 
seem OK?


-------------------------------
Craig Pluchinsky
IT Services
Indiana University of Pennsylvania
724-357-3327


On Tue, 26 Jan 2016, Cantor, Scott wrote:

> On 1/26/16, 3:24 PM, "users on behalf of Tom Zeller" <users-bounces at shibboleth.net on behalf of tzeller at dragonacea.biz> wrote:
>
>
>
>>> I'm trying to setup an intercept based on a regex of an attribute in v 3.2.0.  Is this even possible and can someone give me some guidance?  The example context-check-flow uses an exact match or exists but I'd like to use either a regex or maybe some type of check to see if the attribute contains a certain string.  More specifically I'm trying to see if the dn contains a string I'm looking for, if so then proceed.  Thanks!
>>
>> I thought there was some sort of Predicate which matched an IdPAttributeValue via a regex, but no, I don’t see one. Perhaps the ScriptedPredicate would suffice, less likely the SpringExpressionPredicate. Feel free to submit an issue to request code or documentation. I’ll see if I can make the ScriptedPredicate work.
>
> No, the one I did was a simpler example. I thought somebody else asked about this a few months ago and I gave them some ideas and proposed we could build some example beans to pull from.
>
> If you want to be mucking with this feature, you need to write scripts, or write Java and be able to wire them up with Spring.
>
> -- Scott
>
>>
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list