RFC extensions to Shibboleth

[Peter Schober]

* Andrea Biancini <andrea.biancini at mib.infn.it> [2012-09-04 16:13]:
> The overall scheme of our implementation is similar to the one used
> to authenticate Linux users directly on LDAP (for which modules for
> PAM and NSS exist).

Since obviously you're not opposed to hackery you might want to look
at Emmanuel Dreyfus' CrudeSAML and see if you could help improve it.
E.g. by making it use Shibboleth instead of LASSO/mod_auth_mellon.
Also comes with a PAM module.
-peter