include statements in xml configuration files?

[Wessel, Keith]

I think I follow you here. You're saying externally generate a file that contains a metadata entity attribute filter with the right XML bits in it to add the entity attributes to the specified entity IDs then include it by reference in the metadata provider block. What would the XML look like in the metadata provider block to attach a metadata filter by reference?

This is certainly cleaner than having an external process that copies selected metadata from a federation aggregate into a local file and takes advantage of a lot of the newer bells and whistles. Of course, the beauty of the regex solution is, as long as you have a reliable regex pattern, it's a once and done. Like you said, the regex adds a little computing power as it has to be built each time. There's not a way to avoid that while still using the regex, is there? I'm not thinking of one.

Keith


Thanks,
Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Friday, February 19, 2021 11:58 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: include statements in xml configuration files?

The fundamental point I was really trying to make here was that if you have a thing that can generate a list of entityIDs to magically "include" in some way, then the only difference between having that and something that works is to generate a few extra bits of XML around it to generate a whole Spring file with a MetadataFilter, attach it ByReference, and you're done.

I think the regex is better obviously, but I'm just saying that the alternative is not to script the whole metadata configuration, it's a very small amount of syntax added.

This is why I did hours of work to make filters by reference work. It was *not* easy and it's a huge hack under the covers, but it does work.

-- Scott


-- 
For Consortium Member technical support, see https://urldefense.com/v3/__https://wiki.shibboleth.net/confluence/x/coFAAg__;!!DZ3fjg!rKGRK_fRc_5dTdcGGf3W_zGn4jkUhBoqoHFofERJfRPc6KB8_pNwMVkdpmHCkOPDbw$ 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net