RelationalDatabase data connector generates multiple attributes from a relational database via a JDBC DataSource. The attributes are generated such that each attribute represents a column of the query result set. The ordered values represent the rows of the result set and each attribute will contain the same number of values, including any embedded nulls in the results. Nulls are represented explicitly with objects of type EmptyAttributeValue (note, this is a change from V2, which exposed null values as Java nulls in the attribute value collections).
Schema Name and Location
xsi:type is defined by the
urn:mace:shibboleth:2.0:resolver schema 3.3, located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd.
Prior to V3.3 supplied plugins were defined by a schema type (xsi:type) in the
urn:mace:shibboleth:2.0:resolver:dc namespace, the schema for which is located at http://shibboleth.net/schema/idp/shibboleth-attribute-resolver-dc.xsd. This is still supported, but every element or type in the
urn:mace:shibboleth:2.0:resolver:dc namespace has an equivalently named (but not necessarily identical) version in the
urn:mace:shibboleth:2.0:resolver namespace. The use of the
urn:mace:shibboleth:2.0:resolver namespace also allows a relaxation of the ordering requirements of child elements to reduce strictness.
Any of the common attributes can be specified. In addition the following attributes may be specified:
|boolean||false||Controls whether an empty result set is an error|
|Bean ID||Bean ID of a MappingStrategy<java.sql.ResultSet> to process the result set in a pluggable way|
|Bean ID||Bean ID of a Validator to control what constitutes an initialization failure (set this to "shibboleth.NonFailFastValidator" to bypass connection attempt at config load time)|
|boolean||false||Controls whether a result set with more than one row is an error|
|XML Duration or number of milliseconds||Timeout for the queries made against the database|
|Bean ID||Bean ID of a org.apache.velocity.app.VelocityEngine to use for processing the SQL template|
|readOnlyConnection||boolean||true||Whether the DataConnector should be marked as readonly. If the DataConnector is shared with a subsystem which requires write access (via a <BeanManagedConnection>) this must bet set to false.|
Any of the common child elements can be specified. In addition, the following may be specified.
Not permitted if the
|Connects to a database via a JNDI DataSource defined in the container|
|Connects to a database via a JDBC DataSource defined explicitly|
|Connects to a database via an externally specified javax.sql.DataSource|
|0 or 1||The template of the SQL query to send to the database|
|0 or more||A series of remapping definitions which map a column name to an IdPAttribute ID|
0 or 1
|Defines how results should be cached|
Externally (Spring) Defined Content
springResourceRef attributes are specified, then the configuration is delegated to the supplied resource(s).
springResourceRef attributes are specified, then the configuration of the data connector bean is delegated to the supplied resources. The way this works is that the system will create a factory for an RDBMSDataConnector object, and look for beans in the Spring resource(s) supplied that match the types of properties supported by that type and its parent classes. Note that since these are not public, but implementation classes, they are subject to change, which creates some risk during non-patch upgrades, so you must take additional precautions to use this feature.
In practice, the RDBMS Data Connector may be supplied with beans of the following types:
In addition native bean IDs can be injected as follows:
- The data source can be specified as an externally defined bean via the
<BeanManagedConnection>element (as a recommended replacement for either the
- The mapping of column names can be specified as an externally defined bean via the
mappingStrategyRefattribute (as a replacement for the
- The caching of results can be specified as an externally defined bean via the
<ResultCacheBean>element (as a replacement for the
- Rarely, a non-default Velocity engine can be injected via the