[jira] [Commented] (VCL-497) dedup eppn

2012-03-03 Thread Aaron Coburn (Commented) (JIRA)

[ 
https://issues.apache.org/jira/browse/VCL-497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13221771#comment-13221771
 ] 

Aaron Coburn commented on VCL-497:
--

I asked someone I know at Internet2 (the guys who develop Shibboleth), and he 
said that, strictly speaking, an application *should* be able to handle a 
duplicated ePPN. He suggested stripping off everything after a ";".



> dedup eppn
> --
>
> Key: VCL-497
> URL: https://issues.apache.org/jira/browse/VCL-497
> Project: VCL
>  Issue Type: Improvement
>  Components: web gui (frontend)
>Reporter: Josh Thompson
> Fix For: 2.4
>
>
> The Shibboleth spec allows the eppn to contain duplicates. The code needs to 
> be updated to handle multiples as well as duplicates in those multiples.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira




[jira] [Commented] (VCL-497) dedup eppn

2012-03-02 Thread Josh Thompson (Commented) (JIRA)

[ 
https://issues.apache.org/jira/browse/VCL-497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13221049#comment-13221049
 ] 

Josh Thompson commented on VCL-497:
---

Someone reported to me that their IdP was sending the eppn duplicated.  i.e. - 
It was still unique, but the value was listed twice.  Unfortunately, I don't 
have what the value looked like in php to be able to dedup it.  This URL was 
sent to the person by those managing the IdP:

https://issues.shibboleth.net/jira/browse/SC-162

According to it, even though the field is required to be unique, it is not 
required to only have the value listed once, which seems rather strange to me, 
but apparently that is how it should work.

> dedup eppn
> --
>
> Key: VCL-497
> URL: https://issues.apache.org/jira/browse/VCL-497
> Project: VCL
>  Issue Type: Improvement
>  Components: web gui (frontend)
>Reporter: Josh Thompson
> Fix For: 2.4
>
>
> The Shibboleth spec allows the eppn to contain duplicates. The code needs to 
> be updated to handle multiples as well as duplicates in those multiples.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira




[jira] [Commented] (VCL-497) dedup eppn

2012-03-02 Thread Aaron Coburn (Commented) (JIRA)

[ 
https://issues.apache.org/jira/browse/VCL-497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13220968#comment-13220968
 ] 

Aaron Coburn commented on VCL-497:
--

What do you mean by duplicates? Do you mean multiple values? 

eppn (eduPersonPrincipalName) is always supposed to be a single, scoped value. 
It is also supposed to be globally unique. See here for details:

 http://www.incommon.org/attributesummary.html#eduPersonScoped

eduPersonScopedAffiliation can have multiple values, but that is different. 

In any case, $_SERVER['eppn'] is always supposed to be in this form: user@domain


> dedup eppn
> --
>
> Key: VCL-497
> URL: https://issues.apache.org/jira/browse/VCL-497
> Project: VCL
>  Issue Type: Improvement
>  Components: web gui (frontend)
>Reporter: Josh Thompson
> Fix For: 2.4
>
>
> The Shibboleth spec allows the eppn to contain duplicates. The code needs to 
> be updated to handle multiples as well as duplicates in those multiples.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira




[jira] [Commented] (VCL-497) dedup eppn

2012-03-02 Thread Josh Thompson (Commented) (JIRA)

[ 
https://issues.apache.org/jira/browse/VCL-497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13220951#comment-13220951
 ] 

Josh Thompson commented on VCL-497:
---

I need an example of what $_SERVER['eppn'] gets set to when there are 
duplicates.

> dedup eppn
> --
>
> Key: VCL-497
> URL: https://issues.apache.org/jira/browse/VCL-497
> Project: VCL
>  Issue Type: Improvement
>  Components: web gui (frontend)
>Reporter: Josh Thompson
>Assignee: Josh Thompson
> Fix For: 2.4
>
>
> The Shibboleth spec allows the eppn to contain duplicates. The code needs to 
> be updated to handle multiples as well as duplicates in those multiples.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira