Shibboleth Login Handler questions [SEC=UNCLASSIFIED]

[Caskey, Paul]

On Jul 16, 2013, at 7:53 PM, "BONNY, Michael" <Michael.Bonny at fahcsia.gov.au> wrote:

> I figured the best way would be:
> SP --> Shib IdP (Kerberos Login Handler)
> This seems to be almost impossible, as the documentation for Kerberos just does not have enough detail. All examples I can find refer to Linux/Apache.
> We run a Windows shop, and I need to use Win2008R2/IIS.

For Kerberos on windows, you'll need to create the kerb config file - c:\windows\krb5.ini (assuming that's where your windows is installed).  The shibb config part for kerb couldn't be easier...

If you can't figure it out, ping me off line.  I don't have easy access to the file right now or I would send it (on vacation with really bad connectivity).