Authentication Failure

Peter Schober peter.schober at univie.ac.at
Fri Jan 11 14:05:24 EST 2013


* Kevin P. Foote <kpfoote at iup.edu> [2013-01-11 19:28]:
> If you are trying to get things working initially .. I would suggest
> commenting out RemoteUser and all other login handlers excepts
> UsernamePassword   AND once you have that working .. uncomment the
> PreviousSession login handler.. 
> 
> Having multiple login handlers in play can get confusing unless you know 
> how to pick the right one via your initiating request.

Agreed. Just activating all login handlers in the config won't help
with the error "No user identified by login handler."

(I'd suggest to make the UsernamePassword login handler the new
default in future IdP releases. I think the days where people had an
external SSO system in place (or httpd was expected to be there,
handling authentication) and Shib was an afterthought purely for
federation are long gone. And configuring container-based authN with
Java servlet containers isn't any easier than doing it with Shib, IMO.)

> re.. ldap have you verified that you can reach your ldap server from
> your IdP host?

So far nothing here points at any of this having to do with LDAP
(assuming you solved your problem you had with LDAP back in December).
-peter


More information about the users mailing list