<html><html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I’ll see if I can find a JAAS plugin. The driver though is not open sourced … say that I wanted to take the route of writing something custom, would you agree
that writing the authentication portion would be relatively simple for anyone familiar with Java? And further is the issue of attributes more trouble than it’s worth if we did take that route?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Benjamin Pottier<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Systems Engineer<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The Andover Companies<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">(978) 475-3300 x321<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Cantor, Scott<br>
<b>Sent:</b> Wednesday, February 22, 2017 12:09 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Clarification on custom attributes<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 2/22/17, 11:46 AM, "users on behalf of <a href="mailto:BPottier@andovercos.com">
BPottier@andovercos.com</a>" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of
<a href="mailto:BPottier@andovercos.com%3e">BPottier@andovercos.com></a> wrote:<br>
<br>
> Disclaimer: I’m not a developer … but I want to get the developers I work with onboard with writing a custom action to<br>
> validate username password against a DynamoDB table. I’ve done the research there as far as writing a bean and<br>
> inheriting from the AbstractUsernamePasswordValidationAction class. The process of validating the user seems relatively<br>
> straightforward. My question is how do I approach attributes? Just need some help getting an idea so I can sell it to the<br>
> developers.<br>
<br>
A quick search says there's a JDBC driver for it (I have no idea what it is, I just did a quick check), so the answer is that for authentication I'd just go find a JAAS plugin for JDBC-based login, and for attribute access you just use the built-in JDBC support.<br>
<br>
So no development needed on either, unless there's no such JAAS plugin around anymore. If there's really nothing much out there anymore, I'm happy to add a JAAS module for JDBC to a future release, it's hardly rocket science.<br>
<br>
The challenge with either is that finding drivers with working connection management is tough. Any network issues at all and my experience lately is that they all hang the IdP due to TCP closures. It's just not something I trust much anymore. There's no reason
it can't work, but people just don't build reliable network code in those drivers.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
<br>
<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<p><font size="1" color="gray">This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may include trade secrets or privileged or otherwise confidential information. Federal and state law governing electronic communications apply. Any unauthorized review, use, forwarding, printing, copying, disclosure or distribution is strictly prohibited and may subject that individual to criminal or civil liability. Sender shall not be liable for the improper and/or incomplete transmission of the information contained in this communication or for any delay in its receipt. If you received this message in
error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail. This email, including any attachments, could possibly contain viruses. The receiver assumes all responsible for checking and deleting any potential viruses. No employee, agent or office of the company has the authority to form binding contracts via email. All contracts must be in writing and signed by a company officer.
Employees are prohibited from sending libelous, inappropriate or defamatory statements via any medium, including email, and shall be deemed to be outside the scope of their employment.</font></p></body>
</html>