[java-identity-provider] branch main updated: IDP-1126 - Validation and testing features focused on new deployers

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8a6061a8ae2b8f0b8e188b166a8b062ad98f8211

The following commit(s) were added to refs/heads/main by this push:
       new  8a6061a8a IDP-1126 - Validation and testing features focused on new deployers
8a6061a8a is described below

commit 8a6061a8ae2b8f0b8e188b166a8b062ad98f8211
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Jan 26 10:48:36 2021 -0500

    IDP-1126 - Validation and testing features focused on new deployers
    
    https://issues.shibboleth.net/jira/browse/IDP-1126
    
    Add a demo htpasswd file and default Password flow to use it.
---
 .../net/shibboleth/idp/module/authn/impl/module.properties  |  3 +++
 .../idp/module/conf/authn/password-authn-config.xml         | 13 +++++++++++--
 .../net/shibboleth/idp/module/credentials/demo.htpasswd     |  1 +
 idp-conf/src/test/resources/credentials/demo.htpasswd       |  1 +
 4 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/authn/impl/module.properties b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/authn/impl/module.properties
index a3c5082ce..b146dac6c 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/authn/impl/module.properties
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/authn/impl/module.properties
@@ -56,6 +56,9 @@ idp.authn.Password.2.src = /net/shibboleth/idp/module/views/login.vm
 idp.authn.Password.2.dest = views/login.vm
 idp.authn.Password.3.src = /net/shibboleth/idp/module/views/login-error.vm
 idp.authn.Password.3.dest = views/login-error.vm
+idp.authn.Password.4.src = /net/shibboleth/idp/module/credentials/demo.htpasswd
+idp.authn.Password.4.dest = credentials/demo.htpasswd
+idp.authn.Password.4.optional = true
 
 idp.authn.RemoteUser.name = RemoteUser Authentication
 idp.authn.RemoteUser.desc = Login flow for container-based authentication with a dedicated protected path.
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
index 047aaf014..0bc28953c 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
@@ -12,9 +12,18 @@
        default-init-method="initialize"
        default-destroy-method="destroy">
     
-    <!-- Ordered list of CredentialValidators to apply to a request. -->
+    <!--
+    Ordered list of CredentialValidators to apply to a request.
+    
+    The 4 supplied variants are shown below; the HTPasswd option
+    is an OOB default for demo account purposes, and you will
+    want to remove it after initial install and testing.
+    -->
     <util:list id="shibboleth.authn.Password.Validators">
-        <ref bean="shibboleth.LDAPValidator" />
+        <bean parent="shibboleth.HTPasswdValidator" p:resource="%{idp.home}/credentials/demo.htpasswd" />
+        <!-- <ref bean="shibboleth.LDAPValidator" /> -->
+        <!-- <ref bean="shibboleth.KerberosValidator" /> -->
+        <!-- <ref bean="shibboleth.JAASValidator" /> -->
     </util:list>
 
     <!-- Apply any regular expression replacement pairs to username before validation. -->
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/credentials/demo.htpasswd b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/credentials/demo.htpasswd
new file mode 100644
index 000000000..896fa3283
--- /dev/null
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/credentials/demo.htpasswd
@@ -0,0 +1 @@
+demo:$apr1$ZPtwz5fa$H1MvQ8QU4O46zduU8sLAY/
diff --git a/idp-conf/src/test/resources/credentials/demo.htpasswd b/idp-conf/src/test/resources/credentials/demo.htpasswd
new file mode 100644
index 000000000..896fa3283
--- /dev/null
+++ b/idp-conf/src/test/resources/credentials/demo.htpasswd
@@ -0,0 +1 @@
+demo:$apr1$ZPtwz5fa$H1MvQ8QU4O46zduU8sLAY/

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.