RE: [security-services] LDAP Attribute Profile (saml-profiles-saml2.0)

["Reid, Irving" <irving.reid@hp.com>]

The way I read it, you *do* include the ASN.1 wrapper. Strictly compliant LDAP servers don't store arbitrary binary data in attributes (though some servers let you get away with it). My reading of the text is that you're supposed to take the attribute blob you got from LDAP, which is the JPEG *with* an ASN.1 wrapper, and base64 the whole thing.

If that's not what the profile author intended (or even if it is) we probably need an erratum to clarify.

 - irving -
  

> -----Original Message-----
> From: Scott Cantor [mailto:cantor.2@osu.edu] 
> Sent: January 12, 2006 22:22
> To: Whitehead, Greg; security-services@lists.oasis-open.org
> Subject: RE: [security-services] LDAP Attribute Profile 
> (saml-profiles-saml2.0)
> 
> > If I have a jpegPhoto (0.9.2342.19200300.100.1.60), for 
> example, is  
> > it the binary jpeg data that is base64 encoded or is there 
> some ASN.1  
> > wrapper around that? It's the word encompassing that has me 
> confused.
> 
> I think it's just the data. I can't really parse any 
> particular significance
> to the word encompassing.
> 
> -- Scott
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all 
> your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgr
> oups.php 
> 
>