Code Review: Mapping Directory Groups to eduPersonEntitlement

[Cantor, Scott]

On 4/10/17, 8:47 PM, "users on behalf of Brian Moon" <users-bounces at shibboleth.net on behalf of bmoon at scu.edu> wrote:

> Each time the script is run that file is loaded, so it is dynamic in the sense that changes can be made without having to restart
> tomcat.  The only thing I notice is that I have to log out of the SP and then log back in to see the change in entitlements.

I wasn't aware it would notice the changes, my mistake. 

> The MySQL option is interesting, though, since we will have multiple IdP servers (would be nice to have a single source for this).

I simply run a copy on every node.

>  If going that route, is there documentation that is Shibboleth specific that I can reference

I'm talking about the standard JDBC connector in the IdP. Not a script.

> or should I just look at http://middlewaremagic.com/jboss/?p=2760 for creating the DB connection within the script?

I was absolutely not suggesting anything like that.

-- Scott