| 1 | # |
|---|
| 2 | # INI file to test the SAML Authorisation middleware |
|---|
| 3 | # |
|---|
| 4 | # The %(here)s variable will be replaced with the parent directory of this file |
|---|
| 5 | # |
|---|
| 6 | [DEFAULT] |
|---|
| 7 | testConfigDir = ../../../config |
|---|
| 8 | port = 5000 |
|---|
| 9 | baseURI = localhost:%(port)s |
|---|
| 10 | queryInterfaceKeyName = AUTHZ_DECISION_QUERY_FUNC |
|---|
| 11 | [server:main] |
|---|
| 12 | use = egg:Paste#http |
|---|
| 13 | host = 0.0.0.0 |
|---|
| 14 | port = %(port)s |
|---|
| 15 | |
|---|
| 16 | [pipeline:main] |
|---|
| 17 | pipeline = AuthorisationServiceFilter SAMLSoapAuthzDecisionInterfaceFilter TestApp |
|---|
| 18 | |
|---|
| 19 | [app:TestApp] |
|---|
| 20 | paste.app_factory = ndg.security.test.unit.wsgi.saml:TestApp |
|---|
| 21 | |
|---|
| 22 | [filter:SAMLSoapAuthzDecisionInterfaceFilter] |
|---|
| 23 | paste.filter_app_factory = ndg.security.server.wsgi.saml:SOAPQueryInterfaceMiddleware.filter_app_factory |
|---|
| 24 | prefix = saml. |
|---|
| 25 | saml.pathMatchList = /authorisationservice |
|---|
| 26 | saml.queryInterfaceKeyName = %(queryInterfaceKeyName)s |
|---|
| 27 | saml.deserialise = ndg.saml.xml.etree:AuthzDecisionQueryElementTree.fromXML |
|---|
| 28 | saml.serialise = ndg.saml.xml.etree:ResponseElementTree.toXML |
|---|
| 29 | |
|---|
| 30 | # AuthzDecisionQuery Response settings |
|---|
| 31 | saml.issuerName = /O=NDG/OU=CEDA/CN=Authorisation Service |
|---|
| 32 | saml.issuerFormat = urn:oasis:names:tc:SAML:1.1:nameid-format:x509SubjectName |
|---|
| 33 | saml.clockSkewTolerance = 1 |
|---|
| 34 | saml.assertionLifetime = 86400 |
|---|
| 35 | |
|---|
| 36 | #______________________________________________________________________________ |
|---|
| 37 | # Authorisation Service WSGI settings |
|---|
| 38 | # |
|---|
| 39 | [filter:AuthorisationServiceFilter] |
|---|
| 40 | # This filter is a container for a binding to a SOAP based interface to the |
|---|
| 41 | # Attribute Authority |
|---|
| 42 | paste.filter_app_factory = ndg.security.server.wsgi.authzservice:AuthzServiceMiddleware.filter_app_factory |
|---|
| 43 | prefix = authz. |
|---|
| 44 | authz.policyFilePath = %(here)s/policy.xml |
|---|
| 45 | authz.queryInterfaceKeyName = %(queryInterfaceKeyName)s |
|---|
| 46 | |
|---|
| 47 | # Policy Information Point settings - makes an Attribute Queries to |
|---|
| 48 | # Attribute Authorities |
|---|
| 49 | authz.pip.attributeQuery.subjectIdFormat = urn:esg:openid |
|---|
| 50 | authz.pip.attributeQuery.queryAttributes.0 = urn:siteA:security:authz:1.0:attr, , http://www.w3.org/2001/XMLSchema#string |
|---|
| 51 | authz.pip.attributeQuery.sslCACertDir=%(testConfigDir)s/ca |
|---|
| 52 | authz.pip.attributeQuery.sslCertFilePath=%(testConfigDir)s/pki/test.crt |
|---|
| 53 | authz.pip.attributeQuery.sslPriKeyFilePath=%(testConfigDir)s/pki/test.key |
|---|
