Content Comparison

...

Apply the attached patch-file 'shibPatch' (view and download it at the end of this site) to the source code of Shibboleth 1.3.c to achieve the new class files of shibboleth

...

Entry for describing a group (stored under subtree 'ou=groups'):

dn:				XACMLgroupName=testGroup,
				ou=groups,
				dc=example,
				dc=com
objectclass:	           XACMLgroup XACMLgroupName:		testGroup XACMLmembers:		user1
XACMLmembers:		user2

Entry for describing a policy, valid for the group stated above (stored under subtree 'ou=sitearps,ou=policies'):

dn:        XACMLgroupName=testGroup,
                        ou=groups,
                        dc=example,
                        dc=com
objectclass:            XACMLgroup
XACMLgroupName:         testGroup
XACMLmembers:           user1
XACMLmembers:           user2

Entry for describing a policy, valid for the group stated above (stored under subtree 'ou=sitearps,ou=policies'):

dn:                     XACMLpolicyId=exampleArp,
                        ou=sitearps,
                        ou=policies,
                        XACMLpolicyIddc=exampleArp,
			example,
                      ou=sitearps, 				ou=policies, 				dc=example,
		 com
objectclass:           dc=com objectclass:		XACMLpolicy
XACMLpolicyId:		          exampleArp
XACMLpolicy:		            <Policy> 
 ...see Example ARP... 
 </Policy> 
XACMLgroupNames:		        testGroup
XACMLroles:			             defaultrole

Example ARP

Here is an example XACML-ARP. For description see the tag 'Description'.

...