lajoie [Sun, 31 Aug 2008 11:02:24 +0000 (11:02 +0000)]
Missed a file during last commit
Update attribute resolver so that entitlement does not rely on the static data connector default.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2756
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 31 Aug 2008 09:01:22 +0000 (09:01 +0000)]
Fix SIDP-222
Update README notes to reflect config file changes needed during upgrade
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2755
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 31 Aug 2008 08:40:56 +0000 (08:40 +0000)]
Rework authentication and session management code:
- better tracking of JAAS Subject related properties (principals, public, and priviate credentials)
- better tracking for which authentication method is used for which principal
- no more reliance on the serlvet container session during any step of the authentication process
- raise an error when, during force authn, the authenticated principal is not the same as the previously authenticated principal - SIDP - 196
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2754
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 28 Aug 2008 09:31:38 +0000 (09:31 +0000)]
Fix up static SAML metadata provider and add it to the default config - SIDP-223
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2753
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 7 Aug 2008 10:44:28 +0000 (10:44 +0000)]
Upgrade to latest VT LDAP lib - SC-46
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2752
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 24 Jul 2008 08:26:38 +0000 (08:26 +0000)]
Remove most defaults from schemas - SIDP-204
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2751
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 23 Jul 2008 17:01:34 +0000 (17:01 +0000)]
yeah... save then commit
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2750
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 23 Jul 2008 17:00:49 +0000 (17:00 +0000)]
Update release notes
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2749
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 23 Jul 2008 16:47:21 +0000 (16:47 +0000)]
Add bouncy castle to the jars included on the installer classpath - SIDP-214
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2748
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 19 Jul 2008 07:17:57 +0000 (07:17 +0000)]
Remove duplicated dependencies
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2747
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Fri, 18 Jul 2008 22:09:25 +0000 (22:09 +0000)]
Address SIDP-209: Enforce metadata SPSSODescriptor/@AuthnRequestsSigned on SAML 2 SSO profile handler.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2746
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
rdw [Wed, 16 Jul 2008 13:21:41 +0000 (13:21 +0000)]
https://bugs.internet2.edu/jira/browse/SIDP-172
add check for idp_home being set. Also put into native windows format.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2745
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 16 Jul 2008 06:43:36 +0000 (06:43 +0000)]
Add method back in so that change for SIDP-203 does not constitute an API change
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2744
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 10 Jul 2008 10:35:53 +0000 (10:35 +0000)]
Add name identifiers and assertion IDs to audit log entry - SIDP-203
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2742
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 19 Jun 2008 06:03:10 +0000 (06:03 +0000)]
always add audience restriction to condition
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2741
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 19 Jun 2008 06:02:25 +0000 (06:02 +0000)]
Add relying paty as audience of assertions, SIDP-201
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2740
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 15 Jun 2008 08:36:04 +0000 (08:36 +0000)]
Create release notes docs like other projects and populate it with existing 2.1 changes
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2739
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 15 Jun 2008 08:21:08 +0000 (08:21 +0000)]
Make the session cookie secure if the IdP is accepting authn requests over a secure channel
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2738
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 15 Jun 2008 08:15:16 +0000 (08:15 +0000)]
Fix SIDP-199
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2737
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 15 Jun 2008 08:09:58 +0000 (08:09 +0000)]
Fix up logging message to be more clear when SP requires encryption on NameID but the IdP is unable to support it.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2736
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 28 May 2008 07:59:40 +0000 (07:59 +0000)]
Fix NPE when message doesn't even manage to be decoded enough to construct a basic request context: SIDP-185
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2735
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 28 May 2008 07:51:56 +0000 (07:51 +0000)]
Ask for fully qualified host name during installation to address issue where people enter "localhost": SIDP-173
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2734
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 28 May 2008 07:47:02 +0000 (07:47 +0000)]
Add default security role so Tomcat stops bitching: SIDP-175
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2733
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 22 May 2008 13:21:23 +0000 (13:21 +0000)]
Fix SIDP-189
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2732
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 25 Apr 2008 06:08:40 +0000 (06:08 +0000)]
Fix MDC import statements
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2730
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 24 Apr 2008 07:31:15 +0000 (07:31 +0000)]
Make IdP session ID and principal name available to logging framerwork for inclusion in any message that occurs after session creation; SIDP-183
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2729
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 18 Apr 2008 07:47:13 +0000 (07:47 +0000)]
Add explicit option for support SessionNotOnOrAfter attribute in AuthnStatement; SIDP-165
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2728
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 15:28:57 +0000 (15:28 +0000)]
Address SIDP-167
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2727
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 15:25:49 +0000 (15:25 +0000)]
Fix typo; SIDP-169
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2726
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 15:20:07 +0000 (15:20 +0000)]
Properly set useKeyTab property; SIDP-176
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2725
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 15:05:10 +0000 (15:05 +0000)]
Note release attributes when including the attribute statement within the IdP; SIDP-181
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2724
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 14:28:33 +0000 (14:28 +0000)]
Recreate release branch, now based on Maven
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/branches/REL_2@2722
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 14:26:16 +0000 (14:26 +0000)]
Remove unspec nameid format
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2721
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 17 Apr 2008 12:54:19 +0000 (12:54 +0000)]
Add distro management configs
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2719
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 13 Apr 2008 11:28:48 +0000 (11:28 +0000)]
Fix file urls
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2718
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 13 Apr 2008 11:05:07 +0000 (11:05 +0000)]
Finish up build
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2717
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 13 Apr 2008 08:37:27 +0000 (08:37 +0000)]
Clean up assemblies
Correct project metadata in POM
First part of moving installer to new project layout
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2716
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 12 Apr 2008 16:48:52 +0000 (16:48 +0000)]
correct groupId
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2715
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 12 Apr 2008 16:45:50 +0000 (16:45 +0000)]
First part of mavenizing IdP
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2714
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 7 Apr 2008 17:13:22 +0000 (17:13 +0000)]
Use year macro in license header so I don't ever have to remember to change it
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2713
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 25 Mar 2008 07:05:41 +0000 (07:05 +0000)]
Fix up example config so that the scope isn't Ian's domain
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2712
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Mar 2008 13:37:31 +0000 (13:37 +0000)]
Minor tweaks to default config
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2710
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Mar 2008 08:14:14 +0000 (08:14 +0000)]
NPE when previous session + passive auth is used
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2705
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Mar 2008 08:09:45 +0000 (08:09 +0000)]
Remove previous session handling from possible login handlers during forcen and passive criteria filtering
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2704
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Mar 2008 08:00:40 +0000 (08:00 +0000)]
explicity set force and passive authentication flags
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2703
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 18 Mar 2008 05:54:02 +0000 (05:54 +0000)]
After filtering a request check to see if only previous session is available and the user doesn't have a session.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2702
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 09:12:20 +0000 (09:12 +0000)]
Only set default authn method is one is given
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2701
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 09:10:54 +0000 (09:10 +0000)]
Fix NPE when use has an existing session but is logging into a new service for the first time
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2700
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 09:06:24 +0000 (09:06 +0000)]
Only set default authn method is one is given
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2699
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 09:02:36 +0000 (09:02 +0000)]
Be sure not to add null values to list
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2698
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 08:54:37 +0000 (08:54 +0000)]
Treat unspec authentication method as meaning "any"
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2697
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 15 Mar 2008 07:17:51 +0000 (07:17 +0000)]
Moved supported name format determination code up into base SAML profile class
Treat unspec format appearing in the metadata to mean "any" just as if it had appeared in a NameIDPolicy
No longer need unspec encoders in resolver
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2696
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
cantor [Fri, 14 Mar 2008 17:42:53 +0000 (17:42 +0000)]
Adjust order of NameID encoders for transient IDs so the right 2.0 format gets used by default.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2695
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Wed, 12 Mar 2008 18:46:30 +0000 (18:46 +0000)]
Change method signature to take SAML message context, rather than SAML message.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2694
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
putmanb [Wed, 12 Mar 2008 18:30:50 +0000 (18:30 +0000)]
Implement/override methods for destination endpoint check.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2693
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 11 Mar 2008 15:34:41 +0000 (15:34 +0000)]
doument some default properties
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2692
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 11 Mar 2008 15:22:26 +0000 (15:22 +0000)]
include ePTID examples from Ian
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2691
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 11 Mar 2008 15:13:17 +0000 (15:13 +0000)]
Don't load IdP MD by default
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2690
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 11 Mar 2008 13:07:25 +0000 (13:07 +0000)]
Force nameID encryption if NameIDPolicy requires it
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2689
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 11 Mar 2008 13:00:48 +0000 (13:00 +0000)]
Apply Scott's NameID patch
Fix SIDP-162
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2688
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 10 Mar 2008 18:51:39 +0000 (18:51 +0000)]
hex encode random bytes to get session ID
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2687
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 10 Mar 2008 18:36:49 +0000 (18:36 +0000)]
fix class name
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2686
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 10 Mar 2008 13:47:54 +0000 (13:47 +0000)]
fix typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2685
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 10 Mar 2008 07:58:49 +0000 (07:58 +0000)]
fix typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2684
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 10 Mar 2008 06:08:32 +0000 (06:08 +0000)]
fix typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2683
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 9 Mar 2008 18:23:27 +0000 (18:23 +0000)]
invoke endpoint selector after setting it all up
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2682
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 9 Mar 2008 07:55:54 +0000 (07:55 +0000)]
Place IdP entity ID into subject alt name of cert
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2681
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 9 Mar 2008 07:20:06 +0000 (07:20 +0000)]
Fix SIDP-160
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2680
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 7 Mar 2008 06:53:09 +0000 (06:53 +0000)]
Copy endorsed dir over to IdP home and use it for command line tools
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2679
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 5 Mar 2008 06:42:14 +0000 (06:42 +0000)]
Don't require name identifier in subject
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2678
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 3 Mar 2008 18:09:43 +0000 (18:09 +0000)]
Update release notes
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2676
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 3 Mar 2008 16:18:00 +0000 (16:18 +0000)]
Enabled fallback PKIX validation in default config
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2675
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sun, 2 Mar 2008 09:29:26 +0000 (09:29 +0000)]
Use shib servlet context attribute exporter as it is tolerant of operation outside a webapp container
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2674
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Sat, 1 Mar 2008 18:06:09 +0000 (18:06 +0000)]
Fix up attribute/LDAP names
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2673
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Fri, 29 Feb 2008 08:04:19 +0000 (08:04 +0000)]
Fix for multi-hostname machines
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2672
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Thu, 28 Feb 2008 09:50:29 +0000 (09:50 +0000)]
Remove previous session handler if we're not going to use it.
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2671
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 17:20:22 +0000 (17:20 +0000)]
Add Shib JCE lib
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2670
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 16:49:24 +0000 (16:49 +0000)]
fix filenam typo
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2669
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 14:17:40 +0000 (14:17 +0000)]
Generate keystore with generated, self-signed, X.509 credential
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2668
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 11:54:42 +0000 (11:54 +0000)]
tag attempted authentication trip
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2667
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 11:49:24 +0000 (11:49 +0000)]
fix up conditional for removing unusable login handlers
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2666
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 11:43:46 +0000 (11:43 +0000)]
bit more logging
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2665
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 11:36:27 +0000 (11:36 +0000)]
add some logging
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2664
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 06:43:04 +0000 (06:43 +0000)]
revert to use non-PKIX rules until type mismatches are resolved
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2663
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Wed, 27 Feb 2008 05:45:12 +0000 (05:45 +0000)]
Enable PKIX based trust evaluation
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2662
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 18:14:03 +0000 (18:14 +0000)]
explicitly state support for unspec name ID format
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2661
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 17:50:09 +0000 (17:50 +0000)]
save then commit
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2660
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 17:47:48 +0000 (17:47 +0000)]
Be sure to use inbound message issuer and not peer Id
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2659
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 17:28:26 +0000 (17:28 +0000)]
Log message typo fix
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2658
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 16:52:06 +0000 (16:52 +0000)]
Minor changes to default filter per Ian's suggestions
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2657
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 08:19:11 +0000 (08:19 +0000)]
Set communication profile before decoding
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2656
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 07:42:15 +0000 (07:42 +0000)]
Remove erroneous setting of the protocol binding in the anonymous SP case
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2655
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Tue, 26 Feb 2008 07:32:18 +0000 (07:32 +0000)]
Add bit of verbiage about back button
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2654
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 19:40:08 +0000 (19:40 +0000)]
Set executable property
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2653
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 19:30:00 +0000 (19:30 +0000)]
remove redundant calls
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2652
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 17:54:49 +0000 (17:54 +0000)]
Only create assertions if there is a one or more statements within the response
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2651
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 16:19:23 +0000 (16:19 +0000)]
Use first outbound binding in the case of anonymous RPs
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2650
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 16:12:28 +0000 (16:12 +0000)]
Fix NPE
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2649
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 14:07:50 +0000 (14:07 +0000)]
move decoing phase into try/catch
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2648
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca
lajoie [Mon, 25 Feb 2008 13:53:43 +0000 (13:53 +0000)]
place NameIDFormat elements in correct location
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2647
ab3bd59b-922f-494d-bb5f-
6f0a3c29deca