Clarification on custom attributes

[BPottier at andovercos.com]

Thanks for your help. I think you’ve convinced me not to pursue this.

Benjamin Pottier
Systems Engineer
The Andover Companies
(978) 475-3300 x321

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, February 22, 2017 12:42 PM
To: Shib Users
Subject: Re: Clarification on custom attributes

On 2/22/17, 12:37 PM, "users on behalf of BPottier at andovercos.com<mailto:BPottier at andovercos.com>" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net> on behalf of BPottier at andovercos.com><mailto:BPottier at andovercos.com%3e> wrote:

> I’ll see if I can find a JAAS plugin. The driver though is not open sourced

That's not unusual, but I don't think you really have a choice without taking on a lot more work.

> … say that I wanted to take the route of writing something custom, would you agree
> that writing the authentication portion would be relatively simple for anyone familiar with Java?

Probably not, but native database APIs are usually pretty complex, that's one reason JDBC exists.

> And further is the issue of attributes more trouble than it’s worth if we did take that route?

It depends how generic it is. The authentication portion is presumably limiting the queries and scope, so if you do the same thing on the attribute side than the overall work involved isn't all that different. Building a generic connector for arbitrary queries is not trivial, no, you can see what the code for it looks like.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170222/bd17a2d7/attachment.html>