[upki-fed:55] RE: [upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z<ALd![(BShibboleth IdP 2.1.2$B$K$7$?$i(BeduPersonTargetedID$B$N%U%)!<%^%C%H$,JQ$o(B$B$j$^$9$+!)(B

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[upki-fed:55] RE: [upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z

Subject: [upki-fed:55] RE: [upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z
Date: Thu, 20 Aug 2009 18:53:02 +0900
From: Tomohiro Ito <xxxxxxxx@xxxxxxxxxxxxxxxxxxx>

$B=);3@h@8!"(B

$B;37ABg3X$N0KF#$G$9!#(B

$B>pJs$*$h$S(BDEBUG$B$"$j$,$H$&$4$6$$$^$9!#(B

$B%P%0$N2DG=@-$,9b$=$&$G$9$M!#(B

$BK\2H$H$7$F$O!"<:8z$7$?$H$-$K!"F10l%-!<$G$O:$$k$s$G!"(B
UUID Type4($BMp?t!K$K$7$?$+$C$?$H$$$&$3$H$G$9$M!#(B

$B$3$A$i$H$7$F!":$$C$?$N$O!"(B

$BF1$8>r7o!"(B
$B!&%O%C%7%e$N%-!<(B(salt)
$B!&(BLocalEntityId$B!J(BIdP$B!K(B
$B!&(BPeerEntityId$B!J(BSP)
$B!&(BLocalId
$B$G!"(BComputedID$B$H(BStoredID$B$r$G(BeduPersonTargetedID$B$r@8@.$7$?$H$-$K!"(B
$B0[$J$k%-!<$G$"$k$?$a!":G=i!"(BComputedID$B$G1?MQ$7$F$*$$$F!"$"$H$G!"%;%-%e%j%F%#(B
$B6/2=$N$?$a$K!"(BStoredID$B$K0\9T$9$k$H$$$C$?!"=y!9$K%;%-%e%j%F%#$r6/2=$9$k$H(B
$B$$$C$?!"1?MQ%W%i%s$,N)$F$i$l$J$$$3$H$G$9!#(B

$B$"$H$O!"(BComputedID$B$+$i(BStoredID$B$K0\9T$7$?=V4V$K!"8D?M>pJs$N%W%i%$%^%j(B
$B%-!<$,JQ$o$k$s$G!"#S#PB&$G!"(BeduPersonTargetedID$B$r8D?M<1JL;R$K;H$C$F$$(B
$B$k$HLLE]$J$3$H$K$J$k$H;W$C$?$s$G$9!#(B

$B$"$H!"%3!<%I$rFI$s$G!"$J$s$H$J!<$/46$8$?$s$G$9$,!"(BComputedID$B$H(BStoredID$B$O!"(B
$B!&%O%C%7%e$N%-!<(B(salt)
$B!&(BPeerEntityId$B!J(BSP)
$B!&(BLocalId
$B$r;H$C$F!"@8@.$5$l$F$$$k$s$G$9$M!#(B

$B$H$$$&$3$H$O!"(BIdP$B$,JQ99$5$l$F$bF1$8%-!<$r@8@.$9$k$h$&$K@_7W$5$l$F$$$k$s$G$9$M!#(B

eduPersonTargetedID$B$N;EMM$,7h$^$j$^$7$?$i!"65$($F$/$@$5$$(B
$B;EMM$K9g$o$;$F!"$3$A$i$N(BIdP$B$N@_7W$KAH$_9~$_$^$9!#(B

$B;37ABg3X$H$7$F$O!"(BEPPN$B$H(BeduPersonTargetedID$B$N#2$D$NB0@-$O!"(B
$B%W%i%$%^%j%-!<$N$h$&$J$b$N$J$N$G!"1?MQ$,;O$^$kA0$K!"0BDj$5$;$?$$$H9M$($F$$$^$9(B

$B0J>e!#$"$j$,$H$&$4$6$$$^$7$?!#(B

> -----Original Message-----
> From: xxxxxxxxxxxxxx@xxxxxxxxx [mailto:xxxxxxxxxxxxxx@xxxxxxxxx] On
> Behalf Of Toyokazu Akiyama
> Sent: Thursday, August 20, 2009 1:03 PM
> To: xxxxxxxx@xxxxxxxxx
> Subject: [upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re:
> [upki-fed:50] $B!Zhttps://spaces.internet2.edu/display/SHIB2/ResolverStoredIDDataConnect
> or
> 
> The first ID created for a given requester is always the same as those
> created by the computed ID data connector in order to provide a
> migration path from that data connector. Every subsequently generated
> ID for a given user/IdP/SP triple, if the first one is revoked, is a
> Type 4 UUID.
> 
> $B$H$$$&$3$H$G!$:G=i$O(B computed ID data connector $B$HF1$8J}K!$G(B
> eduPersonTargetedID
> $B$r@8@.$7!$$=$l0\9T$O(B UUID Type4$B!J(B- $B$G6h@Z$i$l$?$b$N!K$r@8@.$9$k$i$7$$$G(B
> $B$9!%(B
> $B:G=i$O(B Computed ID data connector $B$G!$e=q$-$5$l$F$$(B
> $B$^$7$?!%(B
> # Eclipse $B$N(B JPDA $B%G%P%C%0%b!<%I$G3NG'$7$^$7$?!%(B
> 
> $B$b$7$3$NJ}K!$r;H$&$N$G$"$l$P!$K\2H$K%P%0Js9p$7$?J}$,$h$5$=$&$G$9$M!%(B
> 
> $B$*$=$i$/!$@5$7$$;H$$J}$H$7$F$O!$:G=i(B ComputedID $B$GEPO?$7$F$*$$$F!$FCDj(B
> $B$N(B SP $B$K(B
> $B$D$$$F(B UUID $B$K0\9T$9$k$3$H$r7hDj$7$?;~E@$G(B ComputedID $B$N%(%s%H%j$N(B
> deactivationDate
> $B$r(B NOT NULL $B$K$9$l$P!$?7$7$/(B UUID $B$N%(%s%H%j$,@.8y$5$l$F!$$=$A$i$,;H$o(B
> $B$l$k$H$$$&(B
> $B%m%8%C%/$J$s$@$H;W$$$^$9!%(B
> # $B$D$^$j$9$Y$F$N(B SP $B$K$D$$$F!$#1$D$OL58z$J%(%s%H%j$r:n@.$9$kI,MW$,$"(B
> $B$k!)(B
> 
> 2009$BG/(B8$B7n(B20$BF|(B10:53 $B$K(B Tomohiro Ito<xxxxxxxx@xxxxxxxxxxxxxxxxxxx> $B$5(B
> $B$s$O=q$-$^$7$?(B:
> > $B;3CO@h@8(B
> >
> > $B;37ABg3X$N0KF#$G$9!#(B
> > $B$4JV;v!"$"$j$,$H$&$4$6$$$^$9!#(B
> >
> > $B$3$s$J$H$3$m$K%3!<%I$,$"$C$?$N$G$9$M!#(B
> >
> > $B$J$s$H$J!<$/!"LdBjE@$,$o$+$C$F$-$^$7$?!#4V0c$C$F$$$k$+$b(B
> > $B$7$l$^$;$s$N$G!">\$7$$J}%U%)%m!<$7$F$$$?$@$1$k$H9,$$$G$9!#(B
> > Java$B$O!"JY6/ITB-$J$b$N$G$9$+$i!"4V0c$C$F$$$k2DG=@-$,$"$j$^$9!#(B
> >
> >
> edu.internet2.middleware.shibboleth.common.attribute.resolver.provider
> .dataC
> > onnector.StoredIDDataConnector.PersistentIdEntry
> >
> > $B$N%a%=%C%I$,JQ99$5$l$?$h$&$G$9!#(B
> >
> > Version 1.1.2$B$K$O!"?7$?$K!"(B
> >
> >        do {
> >            log.debug("Generated persistent ID was already assigned to
> > another user, regenerating");
> >            persistentId = UUID.randomUUID().toString();
> >        } while (pidStore.getPersistentIdEntry(persistentId, false) !=
> > null);
> >
> > $B$,DI2C$5$l$?$h$&$G$9!#(B
> > $B3+H/\$7$/$J$$$N$G?dB,$G$9$,!"(B
> > Java$B$G(BDo { } while ($B<0(B)$B!!J,$r;H$&$H$-$O!"(B
> > $B:G=i$N#1%k!<%W$OoF0:n$HH=CG$7$^$9!#(BLocalEntityId$B!"(BPeerEntityId$B!"(BLocalId, salt
> $B$,F1(B
> > $B0l>r7o2<$G(B
> > $B@8@.$7$F$_$k$HF1$8#I#D$,@8@.$5$l$J$$$h$&$G!"$A$g$C$H!"5$$K$J$C$F$$$^(B
> $B$7$?!#(B
> >
> > $B0J>e!#$h$m$7$/$*4j$$$7$^$9!#(B
> >
> > $B!;(BVersion 1.0.0
> >
> > protected PersistentIdEntry
> createPersistentId(ShibbolethResolutionContext
> > resolutionContext, String localId,
> >            byte[] salt) throws SQLException {
> >        PersistentIdEntry entry = pidStore.new PersistentIdEntry();
> >
> >
> entry.setLocalEntityId(resolutionContext.getAttributeRequestContext().
> getLoc
> > alEntityId());
> >
> >
> entry.setPeerEntityId(resolutionContext.getAttributeRequestContext().g
> etInbo
> > undMessageIssuer());
> >
> >
> entry.setPrincipalName(resolutionContext.getAttributeRequestContext().
> getPri
> > ncipalName());
> >        entry.setLocalId(localId);
> >
> >        String persisentId;
> >        int numberOfExistingEntries =
> > pidStore.getNumberOfPersistentIdEntries(entry.getLocalEntityId(),
> entry
> >                .getPeerEntityId(), entry.getLocalId());
> >        if (numberOfExistingEntries == 0) {
> >            try {
> >                MessageDigest md = MessageDigest.getInstance("SHA");
> >                md.update(entry.getPeerEntityId().getBytes());
> >                md.update((byte) '!');
> >                md.update(localId.getBytes());
> >                md.update((byte) '!');
> >                persisentId = Base64.encodeBytes(md.digest(salt));
> >            } catch (NoSuchAlgorithmException e) {
> >                log.error("JVM error, SHA-1 is not supported, unable to
> > compute ID");
> >                throw new SQLException("SHA-1 is not supported, unable
> to
> > compute ID");
> >            }
> >        } else {
> >            persisentId = UUID.randomUUID().toString();
> >        }
> >        entry.setPersistentId(persisentId);
> >
> >        entry.setCreationTime(new
> Timestamp(System.currentTimeMillis()));
> >
> >        return entry;
> >    }
> >
> > $B!;(BVersion 1.1.2
> > protected PersistentIdEntry
> createPersistentId(ShibbolethResolutionContext
> > resolutionContext, String localId,
> >            byte[] salt) throws SQLException {
> >        PersistentIdEntry entry = pidStore.new PersistentIdEntry();
> >
> >
> entry.setLocalEntityId(resolutionContext.getAttributeRequestContext().
> getLoc
> > alEntityId());
> >
> >
> entry.setPeerEntityId(resolutionContext.getAttributeRequestContext().g
> etInbo
> > undMessageIssuer());
> >
> >
> entry.setPrincipalName(resolutionContext.getAttributeRequestContext().
> getPri
> > ncipalName());
> >        entry.setLocalId(localId);
> >
> >        String persistentId;
> >        int numberOfExistingEntries =
> > pidStore.getNumberOfPersistentIdEntries(entry.getLocalEntityId(),
> entry
> >                .getPeerEntityId(), entry.getLocalId());
> >        if (numberOfExistingEntries == 0) {
> >            try {
> >                MessageDigest md = MessageDigest.getInstance("SHA");
> >                md.update(entry.getPeerEntityId().getBytes());
> >                md.update((byte) '!');
> >                md.update(localId.getBytes());
> >                md.update((byte) '!');
> >                persistentId = Base64.encodeBytes(md.digest(salt));
> >            } catch (NoSuchAlgorithmException e) {
> >                log.error("JVM error, SHA-1 is not supported, unable to
> > compute ID");
> >                throw new SQLException("SHA-1 is not supported, unable
> to
> > compute ID");
> >            }
> >        } else {
> >            persistentId = UUID.randomUUID().toString();
> >        }
> >
> >        do {
> >            log.debug("Generated persistent ID was already assigned to
> > another user, regenerating");
> >            persistentId = UUID.randomUUID().toString();
> >        } while (pidStore.getPersistentIdEntry(persistentId, false) !=
> > null);
> >
> >        entry.setPersistentId(persistentId);
> >
> >        entry.setCreationTime(new
> Timestamp(System.currentTimeMillis()));
> >
> >        return entry;
> >    }
> >
> >> -----Original Message-----
> >> From: xxxxxxxxxxxxxx@xxxxxxxxx [mailto:xxxxxxxxxxxxxx@xxxxxxxxx] On
> >> Behalf Of xxxxxx@xxxxxxxxx
> >> Sent: Thursday, August 20, 2009 12:16 AM
> >> To: xxxxxxxx@xxxxxxxxx
> >> Subject: [upki-fed:51] Re: [upki-fed:50] $B!Zhttp://svn.middleware.georgetown.edu/view/java-shib-common/tags/1.0.0/
> >>
> src/edu/internet2/middleware/shibboleth/common/attribute/resolver/prov
> >> ider/dataConnector/StoredIDStore.java?view=log
> >> $B$H(B
> >>
> http://svn.middleware.georgetown.edu/view/java-shib-common/tags/1.1.2/
> >>
> src/main/java/edu/internet2/middleware/shibboleth/common/attribute/res
> >> olver/provider/dataConnector/StoredIDStore.java?view=log
> >>
> >> $B$"$?$j$rHf3S$7$?$i0c$$$,$"$j$^$9$+!)(B
> >> --
> >> Kazu
> >
> 
> 
> 
> --
> Toyokazu AKIYAMA
> Faculty of Computer Science and Engineering,
> Kyoto Sangyo University
> TEL/FAX: +81-75-705-1531

Follow-Ups:
- [upki-fed:56] Re:$B!Z
  - From: yamaji

References:

[upki-fed:50] $B!Z
From: Tomohiro Ito

[upki-fed:51] Re: [upki-fed:50] $B!Z
From: yamaji

[upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z
From: Tomohiro Ito

[upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z
From: Toyokazu Akiyama

Prev by Date: [upki-fed:54] Elsevier SP$B4X78$NOCBj(B
Next by Date: [upki-fed:56] Re:$B!Z

Previous by thread: [upki-fed:53] Re: [upki-fed:52] RE: [upki-fed:51] Re: [upki-fed:50] $B!Z

Next by thread: [upki-fed:56] Re:$B!Z

Index(es):
- Date
- Thread