1 Most effort focused on the existing SAML attribute support rather than the GSS extractor.
3 Copy the dictionary.ukerna file from mech_eap to /usr/share/freeradius, and edit /usr/share/freeradius/dictionary to include that dictionary file.
5 Testing sample assertion added to /etc/freeradius/sites-available/default
8 SAML-AAA-Assertion = '<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" IssueInstant="2011-03-19T08:30:00Z" ID="foo" Version="2.0">'
9 SAML-AAA-Assertion += '<saml:Issuer>urn:mace:incommon:osu.edu</saml:Issuer>'
10 SAML-AAA-Assertion += '<saml:AttributeStatement>'
11 SAML-AAA-Assertion += '<saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"><saml:AttributeValue>cantor.2@osu.edu</saml:AttributeValue></saml:Attribute>'
12 SAML-AAA-Assertion += '</saml:AttributeStatement>'
13 SAML-AAA-Assertion += '</saml:Assertion>'
16 Confirmed SAML attributes are available from GSS naming extensions as of 482459a9