1 | # NERC DataGrid Project |
---|
2 | # |
---|
3 | # Conifguration for SAML SOAP Binding Interface to the Attribute Authority |
---|
4 | # |
---|
5 | # P J Kershaw 15/02/10 |
---|
6 | # |
---|
7 | # Copyright (C) 2010 Science and Technology Facilities Council |
---|
8 | # |
---|
9 | # BSD - See LICENCE file for details |
---|
10 | |
---|
11 | # use a separate test case class in the test module and is |
---|
12 | # included here |
---|
13 | [test01AttributeQuery] |
---|
14 | uri = http://localhost:5000/AttributeAuthority/ |
---|
15 | subject = https://openid.localhost/philip.kershaw |
---|
16 | siteAttributeName = urn:siteA:security:authz:1.0:attr |
---|
17 | |
---|
18 | [test02AttributeQueryInvalidIssuer] |
---|
19 | uri = http://localhost:5000/AttributeAuthority/ |
---|
20 | subject = https://openid.localhost/philip.kershaw |
---|
21 | siteAttributeName = urn:siteA:security:authz:1.0:attr |
---|
22 | |
---|
23 | [test03AttributeQueryUnknownSubject] |
---|
24 | uri = http://localhost:5000/AttributeAuthority/ |
---|
25 | subject = https://openid.localhost/unknown |
---|
26 | siteAttributeName = urn:siteA:security:authz:1.0:attr |
---|
27 | |
---|
28 | [test04AttributeQueryInvalidAttrName] |
---|
29 | uri = http://localhost:5000/AttributeAuthority/ |
---|
30 | subject = https://openid.localhost/philip.kershaw |
---|
31 | siteAttributeName = invalid-attr |
---|
32 | prefix = saml. |
---|
33 | saml.serialise = ndg.saml.xml.etree:AttributeQueryElementTree.toXML |
---|
34 | saml.deserialise = ndg.saml.xml.etree:ResponseElementTree.fromXML |
---|
35 | |
---|
36 | [test05AttributeQuerySOAPBindingInterface] |
---|
37 | uri = http://localhost:5000/AttributeAuthority/ |
---|
38 | subject = https://openid.localhost/philip.kershaw |
---|
39 | |
---|
40 | [test06AttributeQueryFromConfig] |
---|
41 | uri = http://localhost:5000/AttributeAuthority/ |
---|
42 | subject = https://openid.localhost/philip.kershaw |
---|
43 | |
---|
44 | attributeQuery.subjectIdFormat = urn:esg:openid |
---|
45 | attributeQuery.clockSkewTolerance = 0. |
---|
46 | attributeQuery.issuerName = /O=Site A/CN=Authorisation Service |
---|
47 | attributeQuery.queryAttributes.0 = urn:esg:first:name, FirstName, http://www.w3.org/2001/XMLSchema#string |
---|
48 | attributeQuery.queryAttributes.roles = urn:siteA:security:authz:1.0:attr, , http://www.w3.org/2001/XMLSchema#string |
---|
49 | |
---|
50 | [test07AttributeQuerySslSOAPBindingInterface] |
---|
51 | uri = http://localhost:5000/AttributeAuthority/ |
---|
52 | subject = https://openid.localhost/philip.kershaw |
---|
53 | |
---|
54 | attributeQuery.subjectIdFormat = urn:esg:openid |
---|
55 | attributeQuery.clockSkewTolerance = 0. |
---|
56 | attributeQuery.issuerName = /O=Site A/CN=Authorisation Service |
---|
57 | attributeQuery.queryAttributes.0 = urn:esg:email:address, EmailAddress, http://www.w3.org/2001/XMLSchema#string |
---|
58 | attributeQuery.queryAttributes.roles = urn:siteA:security:authz:1.0:attr, , http://www.w3.org/2001/XMLSchema#string |
---|
59 | |
---|
60 | # SSL Context Proxy settings |
---|
61 | attributeQuery.sslCACertDir = $NDGSEC_TEST_CONFIG_DIR/ca |
---|
62 | attributeQuery.sslCertFilePath = $NDGSEC_TEST_CONFIG_DIR/pki/test.crt |
---|
63 | attributeQuery.sslPriKeyFilePath = $NDGSEC_TEST_CONFIG_DIR/pki/test.key |
---|
64 | attributeQuery.sslValidDNs = /C=UK/ST=Oxfordshire/O=BADC/OU=Security/CN=localhost, /O=Site A/CN=Attribute Authority |
---|
65 | |
---|