If anyone could help with some/all of this question, that would be great.

Our environment is as follows:  We have Apache in front of Tomcat.  In
Tomcat we are running our webapp and Fedora.  In a servlet filter in
front of our webapp I can get the user's Shibboleth userid and Grouper
groups.

I'm not clear on how then to get this information to Fedora for access
control decisions.
https://wiki.duraspace.org/display/FCR30/XACML+Policy+Enforcement
section 4.3 Shibboleth attributes via an HTTP Servlet Filter looks
like a solution, but only if I can get the information into Fedora's
session, which could be problematic.  Is this still available if using
FeSL?

Are there other solutions for passing in the data?  IIRC, when I tried
using the above, I hit the problem that our web services solution only
allowed adding parameters to the request, not attributes (something
I'll have to look at again when time permits).

Thanks,

Steve

------------------------------------------------------------------------------
Nokia and AT&T present the 2010 Calling All Innovators-North America contest
Create new apps & games for the Nokia N8 for consumers in  U.S. and Canada
$10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing
Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store 
http://p.sf.net/sfu/nokia-dev2dev
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users

Reply via email to