[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[upki-fed:00808] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B

Subject: [upki-fed:00808] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
Date: Fri, 28 Mar 2014 16:00:36 +0900
From: Tatsumi Hosokawa <xxxxxxxx@xxxxxxxxxxxxxx>

OSS$B%F%/%N%m%8(B $BDT8}MM(B

$B7DXf5A=N(BITC$BK\It$N:Y@n$G$9!#(B

$B$3$A$i$N%Q%C%A!";n$7$F$_$?$H$3$m$-$A$s$HF0:n$7$^$7$?!#$"$j$,$H$&$4$6$$$^$9!#(B
$B$3$l$G%@%_!<(BSP$B$N$h$&$J%$%s%A%-$,$"$k$?$a!":#2s$NFbMF$H%^!<%8$7$?%Q%C%A$rE:IU$7$^$9!#(B

$B!t(B $B$^$?!"$3$NJQ99$K$h$C$F$+$J$j>\:Y$J8D?M>pJs$,(Bcatalina.out$B$K=P$F$7$^$&$h$&$K$J$C$?$N$G!"(B
$B!t(B $B$=$N$"$?$j$N%G%P%C%0%a%C%;!<%8$bDY$7$F$7$^$$$^$7$?!#(B

$B8=>u$N@_Dj%U%!%$%k$N(BDTD$B$Or7o$K(B FPSP $B$rMxMQ$9$k7o$G$9$,!"(B
> FPSP $BFb$GMxMQ$7$F$$$k(B SAML2AttributeAuthority $B$r(B
> AttributeResolver $B$KJQ$($k$3$H$G$bBP1~2DG=$+$H;W$$$^$9!#(B
> 
> SAML2AttributeAuthority$B!J(BShibbolethSAML2AttributeAuthority$B!K(B
> $B$NCf$G$O(B AttributeResolver $B$+$iB0@-$r$7$?8e!"(BAttributeFilter $B$N(B
> $B%U%#%k%?=hM}$r@\r7o$K$9$k%Q%?!<%s$H$NN>N)$O9MN8$7$F$$$^$;$s!#(B
> 
> $B0J>e(B
> 
> (2014/03/27 18:44), Tatsumi Hosokawa wrote:
>> $B7DXf5A=N(BITC$BK\It$N:Y@n$G$9!#(B
>>
>> $B7o$N%Q%C%A$r>/$7;H$C$F$_$F$$$^$9$,!":#$N$H$3$m(BStoredID$B$K%@%_!<(BSP$B$N%4%_$,;D$k$3$H0J30$OFC$KLdBj$O$J$5$=$&$G$9!#(B
>>
>> $B$5$i$K>/$72~B$$7$F!"(BSampleFilterPerSP_allow.xml$BFb$G!"(B
>>
>> <!DOCTYPE EntitiesDescriptor [
>>      <!ELEMENT EntitiesDescriptor (DummySP?, EntityDescriptor+)>
>>      <!ELEMENT DummySP   (#PCDATA)>
>>      <!ELEMENT EntityDescriptor   (Attribute*)>
>>      <!ELEMENT Attribute          (#PCDATA)>
>>
>>      <!ATTLIST EntityDescriptor   entityID    CDATA #REQUIRED>
>>      <!ATTLIST EntityDescriptor   denyAll    CDATA #IMPLIED>
>>      <!ATTLIST Attribute          attributeID CDATA #REQUIRED>
>> ]>
>>
>> <EntitiesDescriptor>
>>      <EntityDescriptor entityID="SP$B$N%(%s%F%#%F%#(BID" denyAll="denyAll"/>
>> </EntitiesDescriptor>
>>
>> $B$N$h$&$K$9$k$3$H$G!"3:Ev$9$k(BSP$B$K>pJsAw?.$r$9$kA0$K!"L5>r7o$G(B
>>
>> $B!V$=$N(BSP$B$O$3$N(BIdP$B$+$i$O;H$($^$;$s!W(B
>>
>> $BE*$J!"JL$N%(%i!<%a%C%;!<%8$r=P$;$k$h$&$K$7$F$_$^$7$?(B
>> ($B>e$N(BSampleFilterPerSP_allow.xml$B$N(BDTD$B$b$=$N1F6A$GJQ99$5$l$F$$$^$9(B)$B!#(B
>>
>> $B:#$^$G$NFbMF$rA4$F4^$s$@%Q%C%A$rE:IU$7$^$9!#(B
>>
>> $B:Y@n(B
>>
>>
>> (2014/03/25 15:51), Tatsumi Hosokawa wrote:
>>> $B7DXf5A=N(BITC$BK\It$N:Y@n$G$9!#(B
>>>
>>> $B:rF|!"%*!<%W%s%=!<%9!&%=%j%e!<%7%g%s!&%F%/%N%m%8$NAjK\MM$H$d$j$H$j$5$;$F$$$?$@$$$?7o$NB3$-$G$9!#(B
>>>
>>> Filter Per SP (FPSP)
>>> https://meatwiki.nii.ac.jp/confluence/pages/viewpage.action?pageId=12158554
>>>
>>> $B$G$O!"(BIdP$BB&$GB0@->r7o$K=>$$!"(BSP$B$X$N>pJsAw?.$r6X;_$G$-$^$7$?$,!"$3$NB0@->r7o$KMxMQ$G$-$k$N$O!"(B
>>> SP$B$KAw?.$5$l$kB0@->pJs$@$1$G$7$?!#(B
>>>
>>> $B$H$3$m$,!"EvJ}$NMW7o$H$7$F$O!"(B
>>>
>>> $B!V65?&0w$,3X@88~$1(BDreamSpark$B$rMxMQ$7$h$&$H;W$($P$G$-$F$7$^$&$N$r!"6X;_$7$F$[$7$$!W(B
>>>
>>> $B$H$$$&$b$N$,$"$C$?$N$G$9$,!"(BDreeamSpark$B$O(BePTID$B$N$_$NAw?.$N$?$a!"(B
>>> $B8=:_$"$k(BFPSP$B$G$O65?&0w$NMxMQ$r@)8B$G$-$^$;$s!#(B
>>>
>>> $B$H$$$&$3$H$G!"4JC1$J2~B$$G!"(BSP$B$KAw?.$7$J$$B0@-$r>r7o$K(BFPSP$B$rMxMQ$G$-$J$$$+$H;W$C$FD4$Y$F$_$?$N$G$9$,!"(B
>>> ($B8+$?46$8$R$I$$J}K!$G$9$,(B)$B$"$C$5$j$G$-$?$N$G%Q%C%A$rE:IU$7$^$9!#(B
>>> $B$3$N$d$jJ}$GLdBj$O$J$$$+!"$"$k$$$O$h$jNI$$J}K!$O$"$k$+$J$I!"$40U8+$r$$$?$@$1$k$H9,$$$G$9!#(B
>>>
>>> $B$A$J$_$K%Q%C%A$O:rF|$NAjK\MM$K$h$k(BFPSP$B$N%P%0=$@5$N%Q%C%A$H!"%(%i!<%a%C%;!<%8I=<($K4X$9$k;d$N%Q%C%A$r4^$s$G$$$^$9!#(B
>>>
>>> $BMxMQ$K$O!"(Battribute-filter.xml$B$K%@%_!<$N%(%s%H%j!<$rCV$-$^$9!#(B
>>>
>>>       <!-- Dummy Policy -->
>>>       <afp:AttributeFilterPolicy id="PolicyforDummySP" xmlns:afp="urn:mace:shibboleth:2.0:afp">
>>>         <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://dummy.itc.keio.ac.jp/shibboleth-sp" />
>>>         <afp:AttributeRule attributeID="eduPersonPrincipalName">
>>>           <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>>>           <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>         <afp:AttributeRule attributeID="gakuninScopedPersonalUniqueCode">
>>>           <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>       </afp:AttributeFilterPolicy>
>>>
>>> $B$3$NNc$G$O!"(BePPN$B!"(BAffiliation$B!"(BgakuninScopedPersonalUniqueCode$B$rAw?.$9$k$h$&$K;XDj$7$F$$$^$9$,!"(B
>>> $Bhttps://dummy.itc.keio.ac.jp/shibboleth-sp $B$OB8:_$7$^$;$s!#%a%?%G!<%?$bITMW$G$9!#(B
>>> $B$3$3$G;XDj$7$?B0@-$r!"B>$N(BSP$B$X$N%U%#%k%?$KMxMQ2DG=$G$9!#(B
>>>
>>> $B$=$3$G!"(BSampleFilterPerSP_allow.xml$B$Kr7o$KMxMQ$7$F$_$^$9!#(B
>>>
>>> <?xml version="1.0" encoding="UTF-8"?>
>>> <!DOCTYPE EntitiesDescriptor [
>>>       <!ELEMENT EntitiesDescriptor (DummySP?, EntityDescriptor+)>
>>>       <!ELEMENT DummySP   (#PCDATA)>
>>>       <!ELEMENT EntityDescriptor   (Attribute+)>
>>>       <!ELEMENT Attribute          (#PCDATA)>
>>>
>>>       <!ATTLIST EntityDescriptor   entityID    CDATA #REQUIRED>
>>>       <!ATTLIST Attribute          attributeID CDATA #REQUIRED>
>>> ]>
>>>
>>> <EntitiesDescriptor>
>>>     <DummySP>
>>>        https://dummy.itc.keio.ac.jp/shibboleth-sp
>>>     </DummySP>
>>>     <EntityDescriptor entityID="https://testsp1.itc.keio.ac.jp/shibboleth-sp">
>>>       <Attribute attributeID="gakuninScopedPersonalUniqueCode">
>>>         <!-- XXXXXX$B$O;d$N8D?MHV9f(B -->
>>>         staff:xxxxxx@xxxxxxxxxx
>>>       </Attribute>
>>>     </EntityDescriptor>
>>> </EntitiesDescriptor>
>>>
>>> $B$3$N(B<DummySP/>$B$NItJ,$K!"@h$[$I$N%@%_!<(BSP$B$N(BentityID$B$r@_Dj$7$^$9!#(B
>>> FPSP$B%W%i%0%$%s$OB0@-$rD4$Y$K9T$/;~$K$N$_!"$3$N%@%_!<(BSP$B$K%"%/%;%9$9$k$3$H$r2>Dj$7$F!"(B
>>> $BB0@-$rhttps://testsp1.itc.keio.ac.jp/shibboleth-sp $B$N(BSP$B$KBP$7$F!"(B
>>> gakuninScopedPersonalUniqueCode $B$,(B staff:xxxxxx@xxxxxxxxxx $B$N;~$K$N$_%"%/%;%9$5$;$k$3$H$r@_Dj$7$F$$$^$9!#(B
>>>
>>> $B$A$J$_$K!"(Battribute-filter.xml$B$G$O!"$3$N(B https://testsp1.itc.keio.ac.jp/shibboleth-sp $B$KBP$7$F!"(B
>>>
>>>       <!-- Policy for testsp1 -->
>>>       <afp:AttributeFilterPolicy id="PolicyforTestsp1" xmlns:afp="urn:mace:shibboleth:2.0:afp">
>>>         <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://testsp1.itc.keio.ac.jp/shibboleth-sp" />
>>>         <afp:AttributeRule attributeID="eduPersonPrincipalName">
>>>           <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>         <afp:AttributeRule attributeID="eduPersonAffiliation">
>>>           <afp:PermitValueRule xsi:type="basic:ANY" />
>>>         </afp:AttributeRule>
>>>       </afp:AttributeFilterPolicy>
>>>
>>> $B$H@_Dj$5$l$F$*$j!"(Beppn$B$H(Bunscoped-affiliation$B$N$_$rAw$k$3$H$H$J$C$F$*$j!"(B
>>> gakuninScopedPersonalUniqueCode$B$rAw$k@_Dj$O$"$j$^$;$s!#(B
>>>
>>> $B$3$N>uBV$G!"(BIdP$B$r5/F0$9$k$H!"(Bcatalina.out$B$K$O!"(B
>>>
>>> SampleFilterPerSP DummySP:https://dummy.itc.keio.ac.jp/shibboleth-sp
>>> SampleFilterPerSP config-key-value:
>>> SampleFilterPerSP   https://testsp1.itc.keio.ac.jp/shibboleth-sp : {gakuninScopedPersonalUniqueCode=[staff:xxxxxx@xxxxxxxxxx]}
>>>
>>> $B$H=i4|2=$5$l$^$9!#$3$N(BSP$B$K;d$,%"%/%;%9$9$k$H!"(B
>>>
>>> SampleFilterPerSP spEntityId = https://testsp1.itc.keio.ac.jp/shibboleth-sp
>>> SampleFilterPerSP checked gakuninScopedPersonalUniqueCode=staff:xxxxxx@xxxxxxxxxx
>>>
>>> $B$H$$$&$3$H$G!"%"%/%;%9$,5v2D$5$l$^$9!#(B
>>>
>>> $B$J$*!"0l1~(BIdP$B$H(BSP$BAPJ}$G(BgakuninScopedPersonalUniqueCode$B$NAwe$G!":FEY(BIdP$BB&$N(Battribute-filter.xml$B$G$N$_!"(B
>>> gakuninScopedPersonalUniqueCode$B$NAw?.$r6X;_$9$k$3$H$G!"(B
>>> FPSP$B$NH=CG$K$N$_(BgakuninScopedPersonalUniqueCode$B$,MxMQ$5$l$F$$$k$,!"(B
>>> SP$B$K$O(BgakuninScopedPersonalUniqueCode$B$N>pJs$,EA$o$C$F$$$J$$$3$H$O%F%9%H:Q$_$G$9!#(B
>>>
>>> $B$3$l$G!"85$N(BDreamSpark$B$r65?&0w$K;H$o$;$J$$$H$$$&MW7o$O!"L5;v$K2r7h$G$-$=$&$G$9!#(B
>>>
>>> $BH=CG%k!<%A%s$r$A$g$C$H2~B$$9$k$@$1$G@55,I=8=$H$+$b$$$1$=$&$G$9$,!"(B
>>> $B$H$j$"$($:$3$NJ}K!$GLdBj$,$J$$$+$J$I$r8!F$$7$F$+$i$K$7$?$$$H;W$$$^$9!#(B
>>>
>>> $B$h$m$7$/$*4j$$$7$^$9!#(B
>>>
>>
>>
> 
> 
> 
> 


-- 
$B7DXf5A=N(BITC$BK\It(B  $B:Y@nC#8J(B  xxxxxxxx@xxxxxxxxxxxxxx
Tel. 03-5427-1685  Fax. 03-5427-1722

Attachment: SampleFilterPerSP-5.zip
Description: Zip archive

References:
- [upki-fed:00805] SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
  - From: Tatsumi Hosokawa
- [upki-fed:00806] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
  - From: Tatsumi Hosokawa
- [upki-fed:00807] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
  - From: TSUJIGUCHI Takaya

Prev by Date: [upki-fed:00807] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
Next by Date: [upki-fed:00809] Re: 学認DS新バージョンのお知らせ
Previous by thread: [upki-fed:00807] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B
Next by thread: [upki-fed:00810] 【学認】新規IdP参加のお知らせ
Index(es):
- Date
- Thread

[upki-fed:00808] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B

[upki-fed:00808] Re: SP$B$KAw?.$5$l$J$$B0@-$G(BFilter Per SP(FPSP)$B$r(B$B@)8f$9$k(B