On Jun 9, 2011, at 13:16, Luke Howard wrote:
>> Are there a set of 'radius' attribute names I should use when mapping the SAML attributes ?
>
> The complete assertion goes in SAML-AAA-Assertion (vendor is UKERNA, 25622; attribute ID is 132 -- grab dictionary.ukerna out of mech_eap). You'll need to split it across multiple RADIUS AVPs. You shouldn't need to add other AVPs.
Just to be clear, I'm expected to take the Assertion (XML string) split it into N parts, each part not longer than 253 bytes, and put each part into a RADIUS AVP.
Futher up the line Scott's shib attribute handler is then supposed to take this sequence, join it and do its magic ?
I do hope the order is maintained.
-- Roland
------------------------------------------------------
Roland Hedberg
IT Architect
ICT Services and System Development (ITS)
Umeå University
SE-901 87 Umeå, Sweden
Phone +46 90 786 68 44
Mobile +46 70 696 68 44
www.its.umu.se
|