On Thu, Oct 21, 2010 at 10:25:11AM -0400, Scott Cantor wrote:
> > I'd appreciate input from a wider audience.
> >
> > I guess one question I'd have is why would it tend to fail?
>
> Aside from invalid input, generally it wouldn't fail visibly because any
> internal failures to resolve specific attribute sources would be hidden
> behind the various plugin façades. Those can fail for all kinds of reasons,
> like network outages, data source outages, timeouts, Apache and OpenSSL
> bugs, etc.
>
> Given "valid" configurations of the various components, there aren't any
> other common sources of failure I can think of, but whatever might occur is
> really not something that ought to be visible to an application other than
> as missing or insufficient attributes. That's just a fact of life in a
> federated app.
Agreed.
|