External Authentication setup issues.

[PARDEE, MARTIN (MARTIN)]

Folks:

I'm attempting to use an external auth engine on my idp.  I have a service that uses voice to authenticate a user, and it is activate via a call to a restful web interface.

I have followed the instructions found here: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal,

I have a class, in a jar file, placed in the idp project's WEB-INF/lib directory. This class is patterned after the UserPasswordLoginHandler class in order to get the interface to the AuthEngine right..


I have modified the idp project's web.xml file to include a definition for the servlet, based on that class.

I have modified my handler.xml file to use a LoginHandler definition that refers to the URL for this servlet.

When this is all assembled and the servers restarted, I always get to the UsernamePassword login (if there's no active SSO session still in effect).

I suspect that I need to make some kind of addition or mod to the information in the JAAS configuration file, login.config, but the instructions on this page don't suggest that.

I've examined the community-contributed examples for x509 auth and multi-factor auth, and there are enough differences between these projects and my own, that I get more confused about what is expected. These projects delve into modifying the login.config (which is where I got the idea from) and the xsd schema.

Please, I could really use some guidance on what the bare necessities are for integrating a new external authentication class into the shibboleth frame work are. I am beginning to think that my only recourse is going to be downloading the source and hacking it locally.  This seems like an extremely bad idea, and I can't believe that trying to use a published extension is really this hard. I MUST be missing something.


Thanks for listening to me vent.


Martin Pardee


mlp at research.att.com<mailto:mlp at research.att.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120515/8093cbcd/attachment.html