Shib and F5 VPN authorization

[Youssef GHORBAL]

> On 29 Nov 2017, at 12:20, Peter Schober <peter.schober at univie.ac.at> wrote:
> 
> * Youssef  GHORBAL <youssef.ghorbal at pasteur.fr> [2017-11-29 11:21]:
>> Here is an exemple of un iRule that uses the session attribute uid to set the REMOTE_USER header.
>> 
>> https://www.dropbox.com/s/i31auythkp0g3gc/Screen%20Shot%202017-11-29%20at%2010.55.28.png?dl=0
> 
> Thanks for sharing, Youssef. Just a (slightly unrelated) note that you
> shouldn't rely on the friendlyName structure (attr.friendlyName), but
> on the formal attribute names (attr.name.)
> (The FriendlyName XML-attribute is optional and only meant as a
> debugging help, not to be used for access control.)

Thank you for pointing it out. I'll change the iRules to use the formal attribute.

Youssef