chaining LoginModules in IDP ShibUserPassAuth

[Eugene Dvorkin]

Hi Scott,
Are you referring to Multi factor Login Handler?
https://wiki.shibboleth.net/confluence/display/SHIB2/Multi+Factor+Login+Handler

Thanks
On 03/26/2012 10:56 AM, Cantor, Scott wrote:

On 3/26/12 10:49 AM, "Eugene Dvorkin" <Eugene.Dvorkin at ARTstor.org><mailto:Eugene.Dvorkin at ARTstor.org> wrote:



I have a requirement to create an IDP login page that will first check
against database for a set of test
usernames/ passwords and then, if not found, use LDAP directory to
search for users.
Can I combine LdapLoginModule with DatabaseLoginModule in some kind of
chain in login.config file?



To a degree, yes. JAAS can compose modules for you as documented in its
configuration page. Specifically, you want the "sufficient" tag applied to
each one.

But you get very poor error handling, because JAAS will swallow the module
specific exceptions. If you want real error handling, you need a custom
login handler. My contributed handler (see Contributions page) addresses
that, in fact.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120326/5129b8f5/attachment.html