> I'd appreciate input from a wider audience.
>
> I guess one question I'd have is why would it tend to fail?
Aside from invalid input, generally it wouldn't fail visibly because any
internal failures to resolve specific attribute sources would be hidden
behind the various plugin façades. Those can fail for all kinds of reasons,
like network outages, data source outages, timeouts, Apache and OpenSSL
bugs, etc.
Given "valid" configurations of the various components, there aren't any
other common sources of failure I can think of, but whatever might occur is
really not something that ought to be visible to an application other than
as missing or insufficient attributes. That's just a fact of life in a
federated app.
-- Scott
|