ECP working

[Martin Haase]

Hi Scott, hi Lukas,

this is great news. Another thing quite a few clients of ours did ask
for in the past: X.509 Authentication at the IdP with ECP. Any chance to
decouple this from Apache as well?

Regards,
Martin

Am 03.06.2014 09:57, schrieb Lukas Haemmerle:
> On 02/06/14 23:01, Cantor, Scott wrote:
>> Wow. Maybe 3 hours of work, mostly just thinking time, about 10 lines of
>> new code, and another 10 lines of Spring config added to the existing SSO
>> profile, and ECP is working.
> Good things take time :-) Having ECP support decoupled from the
> container will make it a lot easier for deployers to use that feature.
> As mentioned in Dublin, I think ECP support will become increasingly
> important to easier implement non-browser authentication, especially to
> some of the larger research communities.
>
>
>> Also verified it works without container authentication, if the test
>> script volunteers the basic-auth header.
> Does this mean that the client (script) has to send the "Authorization:
> Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==" header already with the first
> request without getting a HTTP 401 from the server?
>
> Best Regards
> Lukas
>

-- 
Dr. Martin Haase, Solutions Engineer

DAASI International GmbH        
Europaplatz 3                   
D-72072 Tübingen                
Germany                    

phone: +49 7071 407109-6
fax:   +49 7071 407109-9  
email: martin.haase at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2227 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/dev/attachments/20140605/f372151a/attachment.bin