[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/authn-flow-descriptors.xml conf/idp.prope...

[noreply at shibboleth.net]

Author: scantor
Date: Mon Dec  9 15:17:15 2013
New Revision: 5009

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=5009&view=rev
Log:
Merge basic/form JAAS flows and support IsPassive when set.

Added:
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-authn-beans.xml   (with props)
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-authn-flow.xml   (with props)
Modified:
    trunk/idp-conf/src/main/resources/conf/authn-flow-descriptors.xml
    trunk/idp-conf/src/main/resources/conf/idp.properties
    trunk/idp-conf/src/main/resources/conf/webflow-config.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/authn-abstract-flow.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-basic-authn-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-basic-authn-flow.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-form-authn-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/jaas-form-authn-flow.xml

Modified: trunk/idp-conf/src/main/resources/conf/authn-flow-descriptors.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/authn-flow-descriptors.xml?rev=5009&r1=5008&r2=5009&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/authn-flow-descriptors.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/authn-flow-descriptors.xml Mon Dec  9 15:17:15 2013
@@ -48,25 +48,10 @@
             </property>
         </bean>
 
-        <bean c:id="AuthenticationFlow/JAASForm" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
-                p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
-                p:passiveAuthenticationSupported="false"
-                p:forcedAuthenticationSupported="true"
-                p:lifetime="${idp.authn.defaultLifetime}" p:inactivityTimeout="${idp.authn.defaultTimeout}">
-            <property name="supportedPrincipals">
-                <list>
-                    <bean class="net.shibboleth.idp.saml.authn.AuthnContextClassRefPrincipal"
-                        c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" />
-                    <bean class="net.shibboleth.idp.saml.authn.AuthnContextClassRefPrincipal"
-                        c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:Password" />
-                </list>
-            </property>
-        </bean>
-
-        <bean c:id="AuthenticationFlow/JAASBasic" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
+        <bean c:id="AuthenticationFlow/JAAS" class="net.shibboleth.idp.authn.AuthenticationFlowDescriptor"
                 p:resultSerializer-ref="shibboleth.DefaultAuthenticationResultSerializer"
                 p:passiveAuthenticationSupported="true"
-                p:forcedAuthenticationSupported="false"
+                p:forcedAuthenticationSupported="true"
                 p:lifetime="${idp.authn.defaultLifetime}" p:inactivityTimeout="${idp.authn.defaultTimeout}">
             <property name="supportedPrincipals">
                 <list>
@@ -82,7 +67,7 @@
 
     <!--
     Define entries here to map error messages thrown by authentication plugins like JAAS modules
-    and classify them as particular kinds of errors for use in your templates.
+    and classify them as particular kinds of errors for use in your templates and as events in flows.
     -->
     <util:map id="shibboleth.ClassifiedMessageMap">
         <entry key="UnknownUsername">

Modified: trunk/idp-conf/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/idp.properties?rev=5009&r1=5008&r2=5009&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/idp.properties (original)
+++ trunk/idp-conf/src/main/resources/conf/idp.properties Mon Dec  9 15:17:15 2013
@@ -45,7 +45,7 @@
 idp.session.activeResultExtraction = net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults
 
 # Regular expression expressing flows to enable 
-idp.authn.flows = IPAddress|JAASForm
+idp.authn.flows = IPAddress|JAAS
 
 # Default lifetime and timeout of various authentication methods
 idp.authn.defaultLifetime = PT60M

Modified: trunk/idp-conf/src/main/resources/conf/webflow-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/webflow-config.xml?rev=5009&r1=5008&r2=5009&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/webflow-config.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/webflow-config.xml Mon Dec  9 15:17:15 2013
@@ -26,8 +26,7 @@
         <!-- Login methods. -->
         <webflow:flow-location id="AuthenticationFlow/IPAddress" path="/authn/ipaddress-authn-flow.xml" />

[... 24 lines stripped ...]