<div dir="ltr"><div class="gmail_default" style="font-family:times new roman,serif">And if going the MySQL route, then that raises the question of connection pooling so that a new connection does not have to be established every time a user logs in.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br><font face="times new roman, serif">Brian Moon</font><br><font face="times new roman, serif">Senior System Administrator</font><br><font face="times new roman, serif">Enterprise Systems</font><br><font face="times new roman, serif">Santa Clara University</font><br><font face="times new roman, serif">Office: 408.554.4830</font><br><a href="mailto:bmoon@scu.edu" style="font-family:'times new roman',serif" target="_blank">bmoon@scu.edu</a><br></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Mon, Apr 10, 2017 at 5:47 PM, Brian Moon <span dir="ltr"><<a href="mailto:bmoon@scu.edu" target="_blank">bmoon@scu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:"times new roman",serif">Each time the script is run that file is loaded, so it is dynamic in the sense that changes can be made without having to restart tomcat. The only thing I notice is that I have to log out of the SP and then log back in to see the change in entitlements.</div><div class="gmail_default" style="font-family:"times new roman",serif"><br></div><div class="gmail_default" style="font-family:"times new roman",serif">The MySQL option is interesting, though, since we will have multiple IdP servers (would be nice to have a single source for this). If going that route, is there documentation that is Shibboleth specific that I can reference, or should I just look at <a href="http://middlewaremagic.com/jboss/?p=2760" target="_blank">http://middlewaremagic.com/<wbr>jboss/?p=2760</a> for creating the DB connection within the script?</div><div class="gmail_default" style="font-family:"times new roman",serif"><br></div><div class="gmail_default" style="font-family:"times new roman",serif">Thanks!</div></div><div class="gmail_extra"><span class=""><br clear="all"><div><div class="m_-8897343500725604185gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br><font face="times new roman, serif">Brian Moon</font><br><font face="times new roman, serif">Senior System Administrator</font><br><font face="times new roman, serif">Enterprise Systems</font><br><font face="times new roman, serif">Santa Clara University</font><br><font face="times new roman, serif">Office: <a href="tel:(408)%20554-4830" value="+14085544830" target="_blank">408.554.4830</a></font><br><a href="mailto:bmoon@scu.edu" style="font-family:'times new roman',serif" target="_blank">bmoon@scu.edu</a><br></div></div></div></div></div></div></div></div></div></div></div>
<br></span><div><div class="h5"><div class="gmail_quote">On Mon, Apr 10, 2017 at 5:35 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 4/10/17, 8:19 PM, "users on behalf of Brian Moon" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:bmoon@scu.edu" target="_blank">bmoon@scu.edu</a>> wrote:<br>
<br>
> I just wrote a script to map directory groups to eduPersonEntitlement strings. Everything seems to be working fine with it,<br>
> although I would appreciate a code review to make sure that I haven't done anything stupid with it, or to see if there are areas<br>
> that could be better optimized.<br>
<br>
</span>Well, if you're asking, I don't see the point of using the hack of loading JSON to do the mapping given that it's not going to reloadable in isolation anyway. I'd probably stick the mappings into a local MySQL table so it would be dynamic, or if I was satisfied with doing it statically, I'd probably just declarare a map as a Spring bean and access it from the script, which would certainly be a bit faster.<br>
<span class="m_-8897343500725604185HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.n<wbr>et</a><br>
</font></span></blockquote></div><br></div></div></div>
</blockquote></div><br></div>