-
-
-
-
-
-
- | 属性 |
- 属性値 |
-
-
-
-
- // of shib.conf.
- //
- // 3. shibd and httpd restart
- //
- $checkScopedAttribute = false;
- //$checkScopedAttribute = true;
-
- function get_exportAssertion(){
- $eadata = "";
- $xml = simplexml_load_string(file_get_contents($_SERVER['Shib-Assertion-01']));
- foreach ( $xml->children("urn:oasis:names:tc:SAML:2.0:assertion")->AttributeStatement->Attribute as $attr) {
- // eduPersonPrincipalName (ePPN)
- if ((string)$attr->attributes()->Name == 'urn:oid:1.3.6.1.4.1.5923.1.1.1.6') {
- $eadata["eppn"] = $attr->AttributeValue;
- }
-
- // eduPersonScopedAffiliation (ePSA)
- if ((string)$attr->attributes()->Name == 'urn:oid:1.3.6.1.4.1.5923.1.1.1.9') {
- $affiliation_array = array();
- foreach ($attr->AttributeValue as $val) {
- // Add a backslash to match the behavior of SP.
- // example: "member;staff" --> "member\;staff"
- $val = str_replace(';', '\\;', $val);
- array_push($affiliation_array, $val);
- }
- $eadata["affiliation"] = (string)join(";", $affiliation_array);
- }
-
- // eduPersonAffiliation (ePA)
- if ((string)$attr->attributes()->Name == 'urn:oid:1.3.6.1.4.1.5923.1.1.1.1') {
- $affiliation_array = array();
- foreach ($attr->AttributeValue as $val) {
- // Add a backslash to match the behavior of SP.
- // example: "member;staff@example.ac.jp" --> "member\;staff@example.ac.jp"
- $val = str_replace(';', '\\;', $val);
- array_push($affiliation_array, $val);
- }
- $eadata["unscoped-affiliation"] = (string)join(";", $affiliation_array);
- }
-
- // gakuninScopedPersonalUniqueCode
- if ((string)$attr->attributes()->Name == 'urn:oid:1.3.6.1.4.1.32264.1.1.6') {
- $affiliation_array = array();
- foreach ($attr->AttributeValue as $val) {
- // Add a backslash to match the behavior of SP.
- // example: "faculty;staff:12345@example.ac.jp" --> "faculty\;staff:12345@example.ac.jp"
- $val = str_replace(';', '\\;', $val);
- array_push($affiliation_array, $val);
- }
- $eadata["gakuninScopedPersonalUniqueCode"] = (string)join(";", $affiliation_array);
- }
-
- // eduPersonUniqueId
- if ((string)$attr->attributes()->Name == 'urn:oid:1.3.6.1.4.1.5923.1.1.1.13') {
- $eadata["eduPersonUniqueId"] = $attr->AttributeValue;
- }
- }
- return $eadata;
- }
-
- function normal_value($attr_value = ''){
- }
-
- function notice_value($attr_value = ''){
- if (strpos($attr_value, '\;') !== FALSE)
- print '注意：属性値にセミコロンが含まれているためSPによっては正しく動作しない可能性があります
';
- }
-
- function warning_value($attr_value = ''){
- if (strpos($attr_value, '\;') !== FALSE)
- print '警告：属性値にセミコロンが含まれているため正しくありません
';
- }
-
- function check_exportAssertion($attr, $attr_value = '', $ea_attr_value = ''){
- // scoped attributes (e.g. ePPN, ePSA)
- $scoped_attrs = array(
- "eppn",
- "affiliation",
- "gakuninScopedPersonalUniqueCode",
- "eduPersonUniqueId",
- "eduPersonScopedAffiliation",
- );
-
- // affiliation attributes (i.e. ePA, ePSA)
- $affiliation_attrs = array(
- "unscoped-affiliation",
- "affiliation",
- "eduPersonAffiliation",
- "eduPersonScopedAffiliation",
- );
-
- // eduPersonAffiliation permissible values
- // (eduPerson Object Class Specification (200806))
- $epaary = array(
- "faculty", "student", "staff", "alum", "member",
- "affiliate", "employee", "library-walk-in",
- );
-
- // Check of scope for scoped attributes (e.g. ePPN, ePSA)
- if (in_array($attr, $scoped_attrs, true)) {
- if (strcmp($attr_value, $ea_attr_value)) {
- print '警告：メタデータで定義されているスコープと送出された属性のスコープが一致していないか、利用できる属性値ではありません。
';
- print '（送出された属性値は' . $ea_attr_value . 'でした。）
';
- }
- }
-
- // Check of vocabulary for affiliation attributes
- if (in_array($attr, $affiliation_attrs, true)) {
- $ea_attr_value_ary = preg_split("/(?警告：' . $val . "は利用できる属性値ではありません。";
- }
- }
-
- }
- }
-
- $envary = array(
- "eppn" => array("ePPN(eduPersonPrincipalName)" , "normal_value"),
- "persistent-id" => array("eduPersonTargetedID" , "notice_value"),
- "o" => array("o(organizationName)" , "normal_value"),
- "jao" => array("jao(jaOrganizationName)[日本語]" , "normal_value"),
- "ou" => array("ou(organizationalUnitName)" , "normal_value"),
- "jaou" => array("jaou(jaOrganizationalUnitName)[日本語]" , "normal_value"),
- "unscoped-affiliation" => array("職位(eduPersonAffiliation)" , "warning_value"),
- "affiliation" => array("スコープ付き職位(eduPersonScopedAffiliation)" , "warning_value"),
- "entitlement" => array("権限(eduPersonEntitlement)" , "notice_value"),
- "mail" => array("メールアドレス(mail)" , "normal_value"),
- "givenName" => array("名(givenName)" , "normal_value"),
- "jaGivenName" => array("名(jaGivenName)[日本語]" , "normal_value"),
- "sn" => array("姓(sn)" , "normal_value"),
- "jasn" => array("姓(jasn)[日本語]" , "normal_value"),
- "displayName" => array("表示名(displayName)" , "normal_value"),
- "jaDisplayName" => array("表示名(jaDisplayName)[日本語]" , "normal_value"),
- "gakuninScopedPersonalUniqueCode"
- => array("gakuninScopedPersonalUniqueCode" , "notice_value"),
- "isMemberOf" => array("isMemberOf" , "notice_value"),
- "assurance" => array("eduPersonAssurance" , "notice_value"),
- "eduPersonUniqueId" => array("eduPersonUniqueId" , "normal_value"),
- "eduPersonOrcid" => array("eduPersonOrcid" , "notice_value"),
- );
-
- $chart_classes = array(
- array("key" => "chart-key_even", "val" => "chart-value_even"),
- array("key" => "chart-key_odd", "val" => "chart-value_odd" ),
- );
-
- $chart_class_notreceived = array(
- "key" => "chart-key_notreceived",
- "val" => "chart-value_notreceived");
-
- if ($checkScopedAttribute === TRUE){
- $eadata=get_exportAssertion();
- }
-
- $i = 0;
- foreach ($envary as $attr => $key) {
- list($attr_description, $print_message) = $key;
-
- if ($i != 0) {
- print "\n";
- }
-
- $chart_class = $chart_classes[$i % 2];
-
- if (isset($_SERVER[$attr]) === FALSE) {
- $chart_class = $chart_class_notreceived;
- $val = "NOT RECEIVED";
- } else {
- $val = htmlspecialchars($_SERVER[$attr], ENT_QUOTES, "UTF-8");
- }
-
- print ' ';
- print '| ' . $attr_description . ' | ';
- print '' . $val;
- print $print_message($_SERVER[$attr]);
-
- if ($checkScopedAttribute === TRUE && empty($eadata[$attr]) === FALSE){
- check_exportAssertion($attr, $_SERVER[$attr], $eadata[$attr]);
- }
- print ' |
';
-
- $i = $i + 1;
- }
-?>
-
-
- 
-