...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
<!-- Add as first element within root element <SPConfig> of shibboleth2.xml -->
<OutOfProcess>
<Extensions>
<Library path="plugins.so" fatal="true"/>
</Extensions>
</OutOfProcess>
<InProcess>
<Extensions>
<Library path="plugins-lite.so" fatal="true"/>
</Extensions>
</InProcess>
[...]
<!-- Add at end of <Sessions> element -->
<Handler type="AttributeResolver" Location="/AttributeResolver"
acl="127.0.0.1 ::1 130.59.0.0/16 2001:620:0:44::/64" /> |
Attributes
acl
(list of space-delimited IP addresses or CIDR ranges) (defaults to localhost-only access)- A set of requesting addresses to limit access to.
...
Expand | ||
---|---|---|
| ||
Once the AttributeResolver handler is configured, it can for example be queried (e.g. from localhost) with: This will return a JSON data structure like:
|
The output is currently limited to JSON, and is either dumped in a structure containing an array field named for each attribute, with each value serialized to its own own array slot, or is encoded in a way that combines multiple values into delimited strings identical to what would appear in server variables or headers. The latter is enabled by setting the encoding
parameter to "JSON/CGI".