Silently try more then one login handler with UnsolicitedSSO

Douglas E. Engert deengert at anl.gov
Mon Apr 22 16:42:49 EDT 2013


I would like to be able use these login handlers:
PreviousSession, krb:KERBEROS, x509:x509 then PaswordProtectedTransport.
PreviousSession, krb5 and x509 would be silently tried
until one succeeds.

PreviousSession always appears to be tried first. In other words
is there a way to have additional login handlers silently tried too?

We have the X509 and Kerberos packages working, and a default login page
that lets the user select which login handler to try.

We would especially like to use the silent method with UnsolicitedSSO
in a controlled environment where the user should always have a krb5
ticket, and the browser setup to use it.

Is there anyway to pass additional parameters to UnsolicitedSSO
to tell it to request a specific login handler(s)?

Do we have to write our login handler or our own modified UnsolicitedSSO
handler?


-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444


More information about the users mailing list