REMOTE_USER not coming in http headr.

H Sheth h.sheth at tcs.com
Thu Nov 28 12:46:41 EST 2013


Hi, 

I have configured my Shibboleth IDP and Shibboleth SP.  I am being 
redirected to Shibboleth IDP Login page when I hit 
https://localhost/Shibboleth.sso/Login page. On successful login I am 
being redirected to my application page which I have configured in 
Shibboleth2.xml file as homeURL:https://localhost:7006/Url.jsp.

My application is being protected by Spring 2 framework. I have configured 
Pre Auth filter of spring to retrieve  REMOTE_USER attribute from the HTTP 
header. But I am not able to get this attribute from the  header. 

I have configured one attribute as follows :
Rule:
    <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone">
        <afp:PolicyRequirementRule xsi:type="basic:ANY"/>

        <afp:AttributeRule attributeID="transientId">
            <afp:PermitValueRule xsi:type="basic:ANY"/>
        </afp:AttributeRule>
                                  <afp:AttributeRule attributeID="uid">
            <afp:PermitValueRule xsi:type="basic:ANY"/>
        </afp:AttributeRule>

    </afp:AttributeFilterPolicy>

Attr resover:

<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" 
sourceAttributeID="uid">
                <resolver:Dependency ref="mySIS" />
        <resolver:AttributeEncoder xsi:type="enc:SAML1String" 
name="urn:mace:dir:attribute-def:uid" />
        <resolver:AttributeEncoder xsi:type="enc:SAML2String" 
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
    </resolver:AttributeDefinition>



<resolver:DataConnector id="mySIS" xsi:type="dc:RelationalDatabase">
        <dc:ApplicationManagedConnection 
jdbcDriver="oracle.jdbc.driver.OracleDriver"
 jdbcURL="jdbc:oracle:thin:@01hw466242:1521:pbstg"
                                         jdbcUserName="ess_admin"
                                         jdbcPassword="ESS_321" />
        <dc:QueryTemplate>
            <![CDATA[
                SELECT * FROM SEC_USER_MST WHERE USERNAME = 
'$requestContext.principalName'
            ]]>
        </dc:QueryTemplate>

        <dc:Column columnName="USERID" attributeID="uid" />
        <dc:Column columnName="USERNAME" attributeID="uname" />
    </resolver:DataConnector>

SHibboleth2.xml

<ApplicationDefaults entityID="https://localhost:9001/shibboleth"
                 homeURL="https://localhost:9001/DigiGOV"
                         REMOTE_USER="eppn targeted-id" 
                 >

I have configured proxy pass from /DigiGOV to 
https://localhost:7006/User.jsp


I have confiured ShibbolethHeader On in apache22.config file. Still the 
REMOTE_USER is missing from the header. 

Please let me know how to use Shibboleth IDP and Shibboleth SP for 
Authentication in my application. Further how can I get attribute from the 
Shibboleth SP.


Thanks.

Regards,
Hardik Jagatkumar Sheth
Tata Consultancy Services
Ph:- 9107966712785
Buzz:- 4792785
Cell:- +919879324464
Mailto: h.sheth at tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Consulting
____________________________________________
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131128/706f5c27/attachment.html 


More information about the users mailing list