<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01CD8463.AFF54D10">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:DisplayBackgroundShape/>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;
mso-font-charset:2;
mso-generic-font-family:auto;
mso-font-pitch:variable;
mso-font-signature:0 268435456 0 0 -2147483648 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:16.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 2.0pt 1.0in 2.0pt;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>Henry, <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>Thank you <span style='mso-spacerun:yes'> </span></span></font><font
face=Wingdings><span style='font-family:Wingdings;mso-ascii-font-family:"Times New Roman";
mso-hansi-font-family:"Times New Roman";mso-char-type:symbol;mso-symbol-font-family:
Wingdings'><span style='mso-char-type:symbol;mso-symbol-font-family:Wingdings'>J</span></span></font>
<o:p></o:p></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><st1:PersonName w:st="on"><font size=5
face="Times New Roman"><span style='font-size:16.0pt;mso-no-proof:yes'>Leonard
Kroll</span></font></st1:PersonName><span style='mso-no-proof:yes'><o:p></o:p></span></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'>UNIX / GIS Administrator<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'>Univ. <st1:State w:st="on">Massachusetts</st1:State>
<st1:City w:st="on"><st1:place w:st="on">Boston</st1:place></st1:City><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'>Leonard(dot)Kroll(at)umb.edu<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'>Phone: 617-287-5048<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'>fax:<span
style='mso-spacerun:yes'> </span>617-287-5224<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt;mso-no-proof:yes'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>-----Original Message-----<br>
From: users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net] On
Behalf Of Christopher Bongaarts<br>
Sent: Monday, August 27, 2012 12:13 PM<br>
To: users@shibboleth.net<br>
Subject: Re: Externalizing parameters in attribute-resolver.xml to a
propertiesfile</span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>On 8/27/2012 10:51 AM, Smith, Matthew J. wrote:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> I'd like to store Shib IdP configs in our git
VCS, but do not want to<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> check in files with sensitive information.<span
style='mso-spacerun:yes'> </span>Is it possible to<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> externalize parameters, such as the
principalCredential of the LDAP<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> DataConnector, to an external properties file
which can be referenced<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> by attribute-resolver.xml?<span
style='mso-spacerun:yes'> </span>I have search the wiki to no avail, but<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> if documentation for this already does exist,
please feel free to<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>> just hit me over the head with it.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigResource<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>As an example, our services.xml:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span><srv:Service id="shibboleth.AttributeResolver"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>xsi:type="attribute-resolver:ShibbolethAttributeResolver"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>configurationResourcePollingFrequency="PT3M"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>configurationResourcePollingRetryAttempts="5"><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span><srv:ConfigurationResource <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>file="/.../idp/conf/attribute-resolver.xml" <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>xsi:type="resource:FilesystemResource"><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span><ResourceFilter xsi:type="PropertyReplacement"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span
style='mso-spacerun:yes'>
</span>xmlns="urn:mace:shibboleth:2.0:resource"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'> </span><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>propertyFile="/.../idp/conf/attribute-resolver.xml.properties"/><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'> </span></srv:ConfigurationResource><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span></srv:Service><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>Then in attribute-resolver.xml:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span><resolver:DataConnector id="umnLDAP"
xsi:type="LDAPDirectory" <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>xmlns="urn:mace:shibboleth:2.0:resolver:dc"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>ldapURL="${ldap.url}"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>baseDN="o=<st1:place w:st="on"><st1:PlaceType w:st="on">university</st1:PlaceType>
of <st1:PlaceName w:st="on">minnesota</st1:PlaceName></st1:place>,c=us"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>principal="cn=Shibboleth Manager,ou=Application <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>Services,o=<st1:place w:st="on"><st1:PlaceType w:st="on">University</st1:PlaceType>
of <st1:PlaceName w:st="on">Minnesota</st1:PlaceName></st1:place>,c=US"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><span style='mso-spacerun:yes'>
</span>principalCredential="${ldap.password}"><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>Then in attribute-resolver.xml.properties:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>ldap.url = ldap://ldap1.umn.edu ldap://ldap2.umn.edu
ldap://ldap3.umn.edu<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>ldap.password = yeah_you_wish<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>-- <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>%%<span style='mso-spacerun:yes'> </span>Christopher
A. Bongaarts<span style='mso-spacerun:yes'> </span>%%<span
style='mso-spacerun:yes'> </span>cab@umn.edu<span
style='mso-spacerun:yes'> </span>%%<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>%%<span style='mso-spacerun:yes'> </span>OIT -
Identity Management<span style='mso-spacerun:yes'> </span>%%<span
style='mso-spacerun:yes'> </span>http://umn.edu/~cab<span
style='mso-spacerun:yes'> </span>%%<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>%%<span style='mso-spacerun:yes'> </span><st1:place
w:st="on"><st1:PlaceType w:st="on">University</st1:PlaceType> of <st1:PlaceName
w:st="on">Minnesota</st1:PlaceName></st1:place><span
style='mso-spacerun:yes'> </span>%%<span style='mso-spacerun:yes'>
</span>+1 (612) 625-1809<span style='mso-spacerun:yes'> </span>%%<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>--<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=5 face="Times New Roman"><span
style='font-size:16.0pt'>To unsubscribe from this list send an email to
users-unsubscribe@shibboleth.net<o:p></o:p></span></font></p>
</div>
</body>
</html>