565
szerkesztés
Módosítások
→Magyarul
<source lang="sql">
CREATE TABLE `otpservice_tokens` (
`uid` varchar(255) NOT NULL,
`password` varchar(255) NOT NULL,
== IdP plugin ==
A <code>shibboleth-otpdataconnectorservicetoken.jar </code> -t és a <code>mysql-connector.jar </code> -t be kell másolni az <code>idp.war WEB-INF/lib </code> könyvtárába.
Az <code>attribute-resolver.xml </code> -ben a következő változtatásokat kell megtenni:
<source lang="xml">
<!--xml semak megfelelo beallitasa -->
<AttributeResolver
....
xmlns:otpniifconnector="urn:geant:niif.hu:dataconnector"
xsi:schemaLocation="
....
urn:geant:niif.hu:dataconnector classpath:/schema/otpdataconnectorservicetokendataconnector.xsd">
<!-- onetimepassword definicio -->
<resolver:AttributeDefinition id="otpserviceToken" xsi:type="Simple"
xmlns="urn:mace:shibboleth:2.0:resolver:ad"
sourceAttributeID="otpserviceToken">
<resolver:Dependency ref="otpConnectorserviceTokenConnector" />
<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="urn:geant:niif.hu:otpservicetoken" friendlyName="otpserviceToken" />
</resolver:AttributeDefinition>
</resolver:AttributeDefinition>
<!-- one time password service token generalasa --> <resolver:DataConnector xsi:type="otpniifconnector:OTPServiceToken" id="otpConnectorserviceTokenConnector"
sourceAttributeID="uid"
generatedAttributeID="otpserviceToken" tableName="otpservice_tokens"
principalColumn="uid"
passwordColumn="password"
</source>
Az <code>attribute-filter.xml </code> -ben pedig ki kell engedni az <code>uid </code> és otp <code>serviceToken</code> attribútumokat a webmail sp-nek:
<source lang="xml">
<AttributeRule attributeIDAttributeFilterPolicy id="otpsendServiceTokenToWebmail"> <PermitValueRule PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://webmail.example.org/shibboleth" /> </AttributeRule> <AttributeRule attributeID="uid"> <PermitValueRule xsi:type="basic:AttributeRequesterStringANY" /> </AttributeRule> <AttributeRule attributeID="serviceToken" > value <PermitValueRule xsi:type="httpsbasic:ANY" /> </webmail.example.org/shibboleth" /AttributeRule> </AttributeRuleAttributeFilterPolicy>
</source>
