From: Matthew B. <mat...@co...> - 2005-07-20 12:08:51
|
Andrew Booth wrote: > The only changes I'm aware of are: > > 1) The right_index field of the resources table is no longer used, but > leaving it there will not cause any problems. > > 2) The user_name field of the pass_phrases table needs to be increased > in width from 32 characters to 255 or so, otherwise we are going to have > problems with Shib and MVN etc - where we will use usernames of the form > myverylongloginid@llanfairpwllgwyngyllgogerychwyrndrobwllllantysiliogogo > goch.ac.uk I still prefer the idea of having a shib_user table that is linked to a user rather than abusing the pass_phrase table. At the moment everyone who uses the system is considered a user and has a corresponding entry in the users table. The users table contains things like forename, surname and user ID, but it has no concept of username. Now some of these users authenticate to Bodington through internal usernames and passwords and so get an entry in the pass_phrase table. Some users have x509 certificates and so get an entry in the user_x509 table both of which provide a link back to the users table. And I would continue this by saying some users authenticate via shib and therefore entry in the shib_user table. These shib users are not using bodington passwords to login and so should not have an entry in the pass_phrase table. -- +--Matthew Buckett-----------------------------------------+ | VLE Developer, Learning Technologies Group | | Tel: +44 (0) 1865 283660 http://www.oucs.ox.ac.uk/ | +------------Computing Services, University of Oxford------+ |