JAAS Query

[Sangeet Mehta (UST, IND)]

Just like Scott said, implement a custom login handler. I had asked a
similar question few months ago.

 

We ended up creating a custom login handler that does the following

1.       Checks username and password (login.jsp)

2.       Check remote machine IP (part of request attribute)

3.       Verifies a secret question

 

Step number 3 above is a separate JSP that could be anything, in your
case users agree to policy guidelines.

More help and info
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandl
er

 

-sam-

 

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Cantor, Scott
Sent: Tuesday, August 23, 2011 8:53 AM
To: users at shibboleth.net
Subject: Re: JAAS Query

 

On 8/22/11 11:01 PM, "It Meme" <it.meme01 at gmail.com> wrote:

> 

>After authentication, in the JAAS stack, can I display another page,

>before handing back to the IdP?

 

No, JAAS is a validation API, nothing more. It is ill-suited to the web.

You have to create a custom login handler that is more than just JAAS.

 

-- Scott

 

--

To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110822/89d02908/attachment.html