knox-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From kmin...@apache.org
Subject svn commit: r1736450 - in /knox: site/ site/books/knox-0-4-0/ site/books/knox-0-5-0/ site/books/knox-0-6-0/ site/books/knox-0-7-0/ site/books/knox-0-8-0/ site/books/knox-0-9-0/ trunk/books/0.9.0/
Date Thu, 24 Mar 2016 15:09:38 GMT
Author: kminder
Date: Thu Mar 24 15:09:38 2016
New Revision: 1736450

URL: http://svn.apache.org/viewvc?rev=1736450&view=rev
Log:
[KNOX-697] - Identity asserter provider that supports case mapping for users and groups

Modified:
    knox/site/books/knox-0-4-0/deployment-overview.png
    knox/site/books/knox-0-4-0/deployment-provider.png
    knox/site/books/knox-0-4-0/deployment-service.png
    knox/site/books/knox-0-4-0/runtime-overview.png
    knox/site/books/knox-0-4-0/runtime-request-processing.png
    knox/site/books/knox-0-5-0/deployment-overview.png
    knox/site/books/knox-0-5-0/deployment-provider.png
    knox/site/books/knox-0-5-0/deployment-service.png
    knox/site/books/knox-0-5-0/runtime-overview.png
    knox/site/books/knox-0-5-0/runtime-request-processing.png
    knox/site/books/knox-0-6-0/deployment-overview.png
    knox/site/books/knox-0-6-0/deployment-provider.png
    knox/site/books/knox-0-6-0/deployment-service.png
    knox/site/books/knox-0-6-0/runtime-overview.png
    knox/site/books/knox-0-6-0/runtime-request-processing.png
    knox/site/books/knox-0-7-0/deployment-overview.png
    knox/site/books/knox-0-7-0/deployment-provider.png
    knox/site/books/knox-0-7-0/deployment-service.png
    knox/site/books/knox-0-7-0/general_saml_flow.png
    knox/site/books/knox-0-7-0/runtime-overview.png
    knox/site/books/knox-0-7-0/runtime-request-processing.png
    knox/site/books/knox-0-8-0/deployment-overview.png
    knox/site/books/knox-0-8-0/deployment-provider.png
    knox/site/books/knox-0-8-0/deployment-service.png
    knox/site/books/knox-0-8-0/general_saml_flow.png
    knox/site/books/knox-0-8-0/runtime-overview.png
    knox/site/books/knox-0-8-0/runtime-request-processing.png
    knox/site/books/knox-0-9-0/deployment-overview.png
    knox/site/books/knox-0-9-0/deployment-provider.png
    knox/site/books/knox-0-9-0/deployment-service.png
    knox/site/books/knox-0-9-0/general_saml_flow.png
    knox/site/books/knox-0-9-0/runtime-overview.png
    knox/site/books/knox-0-9-0/runtime-request-processing.png
    knox/site/books/knox-0-9-0/user-guide.html
    knox/site/index.html
    knox/site/issue-tracking.html
    knox/site/license.html
    knox/site/mail-lists.html
    knox/site/project-info.html
    knox/site/team-list.html
    knox/trunk/books/0.9.0/config_id_assertion.md

Modified: knox/site/books/knox-0-4-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-4-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-4-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-5-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-5-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-6-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-6-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/general_saml_flow.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/general_saml_flow.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-7-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-7-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/general_saml_flow.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/general_saml_flow.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-8-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-8-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/deployment-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/deployment-provider.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-provider.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/deployment-service.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/deployment-service.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/general_saml_flow.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/general_saml_flow.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/runtime-overview.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/runtime-overview.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/runtime-request-processing.png
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/runtime-request-processing.png?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
Binary files - no diff available.

Modified: knox/site/books/knox-0-9-0/user-guide.html
URL: http://svn.apache.org/viewvc/knox/site/books/knox-0-9-0/user-guide.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/books/knox-0-9-0/user-guide.html (original)
+++ knox/site/books/knox-0-9-0/user-guide.html Thu Mar 24 15:09:38 2016
@@ -1678,7 +1678,39 @@ java -Dsandbox.ldcSystemPassword=guest-p
         <value>_domain1</value>
     </param>
 </provider>
-</code></pre><p>The above configuration will result in all user interactions
through that topology to have their principal communicated to the Hadoop cluster with a domain
designator concatenated to the username. Possibly useful for multi-tenant deployment scenarios.</p><p>In
addition to the concat.suffix parameter, the provider supports the setting of a prefix through
a concat.prefix parameter.</p><h4><a id="Regular+Expression+Identity+Assertion+Provider">Regular
Expression Identity Assertion Provider</a> <a href="#Regular+Expression+Identity+Assertion+Provider"><img
src="markbook-section-link.png"/></a></h4><p>The regular expression identity
assertion provider allows incoming identities to be translated using a regular expression,
template and lookup table. This will probably be most useful in conjunction with the HeaderPreAuth
federation provider.</p><p>There are three configuration parameters used to control
the behavior of the provider.</p>
+</code></pre><p>The above configuration will result in all user interactions
through that topology to have their principal communicated to the Hadoop cluster with a domain
designator concatenated to the username. Possibly useful for multi-tenant deployment scenarios.</p><p>In
addition to the concat.suffix parameter, the provider supports the setting of a prefix through
a concat.prefix parameter.</p><h4><a id="SwitchCase+Identity+Assertion+Provider">SwitchCase
Identity Assertion Provider</a> <a href="#SwitchCase+Identity+Assertion+Provider"><img
src="markbook-section-link.png"/></a></h4><p>The SwitchCase identity
assertion provider solves issues where down stream ecosystem components require user and group
principal names to be a specific case. An example of how this provider is enabled and configured
within the &lt;gateway&gt; section of a topology file is shown below. This particular
example will switch user principals names to lower case and group principal names to upper
case.</p
 >
+<pre><code>&lt;provider&gt;
+    &lt;role&gt;identity-assertion&lt;/role&gt;
+    &lt;name&gt;SwitchCase&lt;/name&gt;
+    &lt;param&gt;
+        &lt;name&gt;principal.case&lt;/name&gt;
+        &lt;value&gt;lower&lt;/value&gt;
+    &lt;/param&gt;
+    &lt;param&gt;
+        &lt;name&gt;group.principal.case&lt;/name&gt;
+        &lt;value&gt;upper&lt;/value&gt;
+    &lt;/param&gt;
+    &lt;enabled&gt;true&lt;/enabled&gt;
+&lt;/provider&gt;
+</code></pre><p>These are the configuration parameters used to control
the behavior of the provider.</p>
+<table>
+  <thead>
+    <tr>
+      <th>Param </th>
+      <th>Description</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>principal.case </td>
+      <td>The case mapping of user principal names. Choices are: lower, upper, none.
Defaults to lower.</td>
+    </tr>
+    <tr>
+      <td>group.principal.case </td>
+      <td>The case mapping of group principal names. Choices are: lower, upper, none.
Defaults to setting of principal.case.</td>
+    </tr>
+  </tbody>
+</table><p>If no parameters are provided the full defaults will results in both
user and group principal names being switched to lower case. A setting of &ldquo;none&rdquo;
or anything other than &ldquo;upper&rdquo; or &ldquo;lower&rdquo; leaves the
case of the principal name unchanged.</p><h4><a id="Regular+Expression+Identity+Assertion+Provider">Regular
Expression Identity Assertion Provider</a> <a href="#Regular+Expression+Identity+Assertion+Provider"><img
src="markbook-section-link.png"/></a></h4><p>The regular expression identity
assertion provider allows incoming identities to be translated using a regular expression,
template and lookup table. This will probably be most useful in conjunction with the HeaderPreAuth
federation provider.</p><p>There are three configuration parameters used to control
the behavior of the provider.</p>
 <table>
   <thead>
     <tr>

Modified: knox/site/index.html
URL: http://svn.apache.org/viewvc/knox/site/index.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/index.html (original)
+++ knox/site/index.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; REST API Gateway for the Hadoop Ecosystem</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/site/issue-tracking.html
URL: http://svn.apache.org/viewvc/knox/site/issue-tracking.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/issue-tracking.html (original)
+++ knox/site/issue-tracking.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; Issue Tracking</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/site/license.html
URL: http://svn.apache.org/viewvc/knox/site/license.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/license.html (original)
+++ knox/site/license.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; Project License</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/site/mail-lists.html
URL: http://svn.apache.org/viewvc/knox/site/mail-lists.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/mail-lists.html (original)
+++ knox/site/mail-lists.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; Project Mailing Lists</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/site/project-info.html
URL: http://svn.apache.org/viewvc/knox/site/project-info.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/project-info.html (original)
+++ knox/site/project-info.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; Project Information</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/site/team-list.html
URL: http://svn.apache.org/viewvc/knox/site/team-list.html?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/site/team-list.html (original)
+++ knox/site/team-list.html Thu Mar 24 15:09:38 2016
@@ -1,13 +1,13 @@
 <!DOCTYPE html>
 <!--
- | Generated by Apache Maven Doxia at 2016-03-22
+ | Generated by Apache Maven Doxia at 2016-03-24
  | Rendered using Apache Maven Fluido Skin 1.3.0
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="Date-Revision-yyyymmdd" content="20160322" />
+    <meta name="Date-Revision-yyyymmdd" content="20160324" />
     <meta http-equiv="Content-Language" content="en" />
     <title>Knox Gateway &#x2013; Team list</title>
     <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
@@ -58,7 +58,7 @@
               
                 
                     
-                  <li id="publishDate" class="pull-right">Last Published: 2016-03-22</li>

+                  <li id="publishDate" class="pull-right">Last Published: 2016-03-24</li>

             
                             </ul>
       </div>

Modified: knox/trunk/books/0.9.0/config_id_assertion.md
URL: http://svn.apache.org/viewvc/knox/trunk/books/0.9.0/config_id_assertion.md?rev=1736450&r1=1736449&r2=1736450&view=diff
==============================================================================
--- knox/trunk/books/0.9.0/config_id_assertion.md (original)
+++ knox/trunk/books/0.9.0/config_id_assertion.md Thu Mar 24 15:09:38 2016
@@ -117,6 +117,35 @@ The above configuration will result in a
 
 In addition to the concat.suffix parameter, the provider supports the setting of a prefix
through a concat.prefix parameter.
 
+#### SwitchCase Identity Assertion Provider ####
+The SwitchCase identity assertion provider solves issues where down stream ecosystem components
require user and group principal names to be a specific case.
+An example of how this provider is enabled and configured within the \<gateway> section
of a topology file is shown below.
+This particular example will switch user principals names to lower case and group principal
names to upper case.
+
+    <provider>
+        <role>identity-assertion</role>
+        <name>SwitchCase</name>
+        <param>
+            <name>principal.case</name>
+            <value>lower</value>
+        </param>
+        <param>
+            <name>group.principal.case</name>
+            <value>upper</value>
+        </param>
+        <enabled>true</enabled>
+    </provider>
+
+These are the configuration parameters used to control the behavior of the provider.
+
+Param                | Description
+---------------------|------------
+principal.case       | The case mapping of user principal names.  Choices are: lower, upper,
none.  Defaults to lower.
+group.principal.case | The case mapping of group principal names.  Choices are: lower, upper,
none. Defaults to setting of principal.case.
+
+If no parameters are provided the full defaults will results in both user and group principal
names being switched to lower case.
+A setting of "none" or anything other than "upper" or "lower" leaves the case of the principal
name unchanged.
+
 #### Regular Expression Identity Assertion Provider ####
 The regular expression identity assertion provider allows incoming identities to be translated
using a regular expression, template and lookup table.
 This will probably be most useful in conjunction with the HeaderPreAuth federation provider.



Mime
View raw message