Stephen Bayliss wrote
> 
> Hi João
> 
> Looking at
> https://github.com/fcrepo/fcrepo/blob/v3.4.2/fcrepo-security/fcrepo-security
> -pdp/src/pdp_home/conf/config-attribute-finder.xml the config is there in
> 3.4.2 to reveal that property using the Fedora RI property URI for it, ie:
> info:fedora/fedora-system:def/model#ownerId - but you are saying this is
> not
> working?
> 

Yes, its not working for me. I'm wondering if this can be replicated on your
side (if you have one running).



Stephen Bayliss wrote
> 
>> As far as the JAAS subject attributes, since I couldn't find 
>> more information on this, instead of having JAAS gather all 
>> the user information (as its not required by my application) 
>> I decided to create a new Attribute Finder for subjects that 
>> would query the LDAP server for more user information (some 
>> queries a bit more complex than those allowed by 
>> LDAPAttributeFinder). Compiled it and it worked just fine :) 
>> (yes, this is more  a "dev" kind of thing, but thought I 
>> would update you)
> 
> That's great!  Anything you're able to share/contribute back on this I'm
> sure would be most welcome.
> 
> 

My attribute finder is a bit too specific to be of any help for FCREPO, what
I think would work best in the current FeSL path would be an attribute
finder that would take a list from the config-attribute-finder and retrieve
those attributes from the JAAS servlet. 

With this done we can improve the jaas.conf and perhaps add a few more
classes or further develop the LDAP authentication mechanism.

What do you think would be the best way to access the JAAS servlet for a
user, from an attribute finder? If we go from there I can probably
contribute with a SubjectAttributeFinder class.

Regards,
João Zamite


--
View this message in context: 
http://fedora-commons.1317035.n2.nabble.com/FeSL-policies-resource-OwnerID-tp7136520p7154090.html
Sent from the Fedora Commons Users mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Fedora-commons-users mailing list
Fedora-commons-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users

Reply via email to