shibidp ECP extension configuration: REMOTE_USER not set

[Brent Putman]

On 10/1/12 9:16 PM, Brent Putman wrote:
>
>
> I believe you may also need to tell it the class that should be used
> for the user principal.  Perhaps if you don't it just defaults to the
> first (and probably only) one present, but you can add it for good
> measure.  The Shib UsernamePassword LoginHandler populates that with
> principal:
> edu.internet2.middleware.shibboleth.idp.authn.UsernamePrincipal.  You
> do that via the 'userClassNames' attribute on the realm.

Sorry, that's not right.  I forgot, the Shib LoginHandler isn't running
in this case for container managed authN.  You can try just leaving this
out until you get your JAAS config file issue sorted out.  Should it
turn out that you do need to add the user principal class names, it's
going to be the one populated by the VT LDAP JAAS module, and
fortunately looks like they have an actual Tomcat Realm examplealready:

http://code.google.com/p/vt-middleware/wiki/vtldapJAAS#Tomcat_Realm

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121001/003e6f76/attachment.html