Changeset 6721 for TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/config/attributeauthority/sitea/site-a.ini

Timestamp:

11/03/10 14:55:42 (11 years ago)

Author:

pjkersha

Message:

• Working Attribute Authority client unit tests. Configuration parameters such as issuer and flags to test query timestamp and SAML version string have now been moved out of the Attribute Authority to the generic SAML subject Query middleware interface ndg.security.server.wsgi.saml.SOAPQueryInterfaceMiddleware. This could be moved into the SAML egg at a later stage. The AuthzDecisionQuery? interface should be retested to allow for these changes.

File:

• TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/config/attributeauthority/sitea/site-a.ini (modified) (5 diffs)

TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/config/attributeauthority/sitea/site-a.ini

@@ -21 +21 @@
 
 [app:mainApp]
-paste.app_factory = ndg.security.test.config.attributeauthority.sitea.siteAServerApp:app_factory
+paste.app_factory = ndg.security.test.config.attributeauthority.sitea.sitea_attributeauthority:app_factory
 
 # Chain of SOAP Middleware filters - Nb. WS-Security filters apply to the SOAP
@@ -43 +43 @@
 attributeAuthority.environKeyNameAttributeQueryInterface: %(attributeQueryInterfaceEnvironKeyName)s
 
-# Attribute Authority settings
-# 'name' setting MUST agree with map config file 'thisHost' name attribute
-attributeAuthority.name: Site A
+# Attribute Authority settings...
 
 # Lifetime is measured in seconds
@@ -55 +53 @@
 # user ID
 attributeAuthority.attributeInterface.modFilePath: %(here)s
-attributeAuthority.attributeInterface.modName: siteAUserRoles
-attributeAuthority.attributeInterface.className: TestUserRoles
+attributeAuthority.attributeInterface.className: sitea_attributeinterface.TestUserRoles
 
 # SAML SOAP Binding to the Attribute Authority
@@ -68 +65 @@
 saml.soapbinding.serialise = ndg.security.common.saml_utils.esg.xml.etree:EsgResponseElementTree.toXML
 
-saml.soapbinding.pathMatchList = /AttributeAuthority/saml
+saml.soapbinding.pathMatchList = /AttributeAuthority
 saml.soapbinding.queryInterfaceKeyName = %(attributeQueryInterfaceEnvironKeyName)s
 
@@ -74 +71 @@
 # tolerance for query issueInstant parameter. Set here to 3 minutes
 saml.soapbinding.clockSkewTolerance: 180.0
+
+saml.soapbinding.issuer: /O=Site A/CN=Attribute Authority
 
 # Logging configuration