Authentication Failure

[Ogunleye, Philip]

Hi Peter,

I have made the change, my request is now presenting me with the
shibboleth login page.  With regards to my ldap issue I manually
installed the IDP on tomcat using this page
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall.  I was
hoping this would allow me to identify the cause of the ldap issue I
had.  Sadly it doesn't appear to have resolved it, however, I am much
closer to have the SAML authentication up and running.  I can send
requests and receive responses, even though the responses are failed
responses.  Now my final issue is to authenticate, once that issue is
resolved I will have my environment issues resolved.

I wasn't sure if my SP settings had been picked up, but the fact that
the IDP has started while I've added the extra line to my handler leads
me to believe everything in that area is fine.

Regards.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Peter Schober
Sent: 11 January 2013 19:05
To: users at shibboleth.net
Subject: Re: Authentication Failure

* Kevin P. Foote <kpfoote at iup.edu> [2013-01-11 19:28]:
> If you are trying to get things working initially .. I would suggest 
> commenting out RemoteUser and all other login handlers excepts
> UsernamePassword   AND once you have that working .. uncomment the
> PreviousSession login handler.. 
> 
> Having multiple login handlers in play can get confusing unless you 
> know how to pick the right one via your initiating request.

Agreed. Just activating all login handlers in the config won't help with
the error "No user identified by login handler."

(I'd suggest to make the UsernamePassword login handler the new default
in future IdP releases. I think the days where people had an external
SSO system in place (or httpd was expected to be there, handling
authentication) and Shib was an afterthought purely for federation are
long gone. And configuring container-based authN with Java servlet
containers isn't any easier than doing it with Shib, IMO.)

> re.. ldap have you verified that you can reach your ldap server from 
> your IdP host?

So far nothing here points at any of this having to do with LDAP
(assuming you solved your problem you had with LDAP back in December).
-peter
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net