REMOTE_USER not coming in http headr.
H Sheth
h.sheth at tcs.com
Thu Nov 28 12:46:41 EST 2013
Hi,
I have configured my Shibboleth IDP and Shibboleth SP. I am being
redirected to Shibboleth IDP Login page when I hit
https://localhost/Shibboleth.sso/Login page. On successful login I am
being redirected to my application page which I have configured in
Shibboleth2.xml file as homeURL:https://localhost:7006/Url.jsp.
My application is being protected by Spring 2 framework. I have configured
Pre Auth filter of spring to retrieve REMOTE_USER attribute from the HTTP
header. But I am not able to get this attribute from the header.
I have configured one attribute as follows :
Rule:
<afp:AttributeFilterPolicy id="releaseTransientIdToAnyone">
<afp:PolicyRequirementRule xsi:type="basic:ANY"/>
<afp:AttributeRule attributeID="transientId">
<afp:PermitValueRule xsi:type="basic:ANY"/>
</afp:AttributeRule>
<afp:AttributeRule attributeID="uid">
<afp:PermitValueRule xsi:type="basic:ANY"/>
</afp:AttributeRule>
</afp:AttributeFilterPolicy>
Attr resover:
<resolver:AttributeDefinition xsi:type="ad:Simple" id="uid"
sourceAttributeID="uid">
<resolver:Dependency ref="mySIS" />
<resolver:AttributeEncoder xsi:type="enc:SAML1String"
name="urn:mace:dir:attribute-def:uid" />
<resolver:AttributeEncoder xsi:type="enc:SAML2String"
name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" />
</resolver:AttributeDefinition>
<resolver:DataConnector id="mySIS" xsi:type="dc:RelationalDatabase">
<dc:ApplicationManagedConnection
jdbcDriver="oracle.jdbc.driver.OracleDriver"
jdbcURL="jdbc:oracle:thin:@01hw466242:1521:pbstg"
jdbcUserName="ess_admin"
jdbcPassword="ESS_321" />
<dc:QueryTemplate>
<![CDATA[
SELECT * FROM SEC_USER_MST WHERE USERNAME =
'$requestContext.principalName'
]]>
</dc:QueryTemplate>
<dc:Column columnName="USERID" attributeID="uid" />
<dc:Column columnName="USERNAME" attributeID="uname" />
</resolver:DataConnector>
SHibboleth2.xml
<ApplicationDefaults entityID="https://localhost:9001/shibboleth"
homeURL="https://localhost:9001/DigiGOV"
REMOTE_USER="eppn targeted-id"
>
I have configured proxy pass from /DigiGOV to
https://localhost:7006/User.jsp
I have confiured ShibbolethHeader On in apache22.config file. Still the
REMOTE_USER is missing from the header.
Please let me know how to use Shibboleth IDP and Shibboleth SP for
Authentication in my application. Further how can I get attribute from the
Shibboleth SP.
Thanks.
Regards,
Hardik Jagatkumar Sheth
Tata Consultancy Services
Ph:- 9107966712785
Buzz:- 4792785
Cell:- +919879324464
Mailto: h.sheth at tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty. IT Services
Business Solutions
Consulting
____________________________________________
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131128/706f5c27/attachment.html
More information about the users
mailing list