Re: [Bodington-developers] SP testing on wiki

[Sean M. <se...@sm...>]

yeah, the problem here is making it easy (or even achievable) to make  
something work correctly for a site without having to resort to hackery.

Alistair's recs were:

Provide a separate shibboleth route into Bodington so that the main / 
site can be left as is for local users. Recommend this be called / 
shibboleth
Document known behaviour such as shibbed sysadmin access.
Install a Guanxi SP Engine somewhere at a partner site to allow  
shibbed Bods to test their functionality without having to install an  
Engine. Perhaps consider this as the default distribution of  
Bodington shibboleth functionality. i.e. shipping Bod with the SP  
module and a Guanxi Guard but make a Guanxi Engine available on  
bodington.org or other domain for bods to use.
Documentation to be provided on how to use the SP module.


They seem perfectly reasonable to me for production release code.


s


On 6 Jul 2006, at 09:35, Alistair Young wrote:

> Thanks Atif, much ado about nothing then ;)
>
> I've updated http://www.bodington.org/wiki/index.php?
> title=TestRel2.8#Shibboleth_Functionality
>
> any chance of documentation on the wiki (rhetorical question) and
> some logging? The documentation could be an example walkthrough of
> setting up the sp module for an IdP domain.
>
> Alistair
>
> On 5 Jul 2006, at 18:22, Atif Suleman wrote:
>
>> Alistair Young wrote:
>>
>>>> why is it so much work to change that behaviour, so that normal
>>>> users
>>>> login via /site/ and Shibb users via /xyz/?
>>>>
>>>>
>>> spot on - that's the goal, shibb users go in via /xyz - I can't say
>>> how much work that is but until it's there bod can't be  
>>> advertised as
>>> an sp. Taking over the /site for shibb users and shunting normal
>>> users to /opensite is not going to go down well with the bod
>>> community.
>>>
>>>
>>>
>> It can be done without much problem, all that is needed is the
>> following
>> in bodington web.xml:
>>
>> <filter-mapping>
>>         <filter-name>Guanxi Resource Guard</filter-name>
>>          <url-pattern>/spsite/*</url-pattern>
>> </filter-mapping>
>>
>> <servlet-mapping>
>>         <servlet-name>building</servlet-name>
>>         <url-pattern>/spsite/*</url-pattern>
>> </servlet-mapping>
>>
>> The /xyz is /spsite/*
>>
>> Normal users can go through /site/*
>>
>> Ta
>> Atif.
>>
>> Using Tomcat but need to do more? Need to support web services,
>> security?
>> Get stuff done quickly with pre-integrated technology to make your
>> job easier
>> Download IBM WebSphere Application Server v.1.0.1 based on Apache
>> Geronimo
>> http://sel.as-us.falkag.net/sel?
>> cmd=lnk&kid=120709&bid=263057&dat=121642
>> _______________________________________________
>> Bodington-developers mailing list
>> Bod...@li...
>> https://lists.sourceforge.net/lists/listinfo/bodington-developers
>
>
> Using Tomcat but need to do more? Need to support web services,  
> security?
> Get stuff done quickly with pre-integrated technology to make your  
> job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache  
> Geronimo
> http://sel.as-us.falkag.net/sel? 
> cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Bodington-developers mailing list
> Bod...@li...
> https://lists.sourceforge.net/lists/listinfo/bodington-developers
>