MCB, IDP,next question ....

[David Langenberg]

The Duo support for the MCB is here:

https://github.com/uchicago/mcb-duo

and also linked to from

https://wiki.shibboleth.net/confluence/pages/viewpage.action?pageId=14876757

Dave


On Mon, Dec 1, 2014 at 7:48 AM, Steven Carmody <steven_carmody at brown.edu>
wrote:

> Hi,
>
> I rebuilt the IDP, from scratch, adding back in the DUO support and the
> MCB support. This time it works (sorta, see below). I'm not going to
> worry (yet) about last week's problems.  ;-)
>
> However, the IDP sent an authN failed msg to the SP:
>
> > Unable to satisfy requested authentication context
>
> I'm not sure why .... I see:
>
> > Using [brownAuthenticationProfiles] for attribute-resolver ID value.
>
> and
>
> > LDAP data connector brownLDAP - Found the following attribute:
> brownAuthenticationProfiles[http://brown.edu/duo,
> urn:oasis:names:tc:SAML:2.0:ac:classes:Password]
>
> But, the long list of "Resolved attribute" lines in the idp-process log
> file does NOT contain any lines for brownAuthenticationProfiles -- that
> makes sense, because I didn't add an AttributeDefinition to the
> Attr-bute-resolver file for that ldap attribute.
>
> Then there's a bunch of lines put out by MCBAttributeResolver,
> describing the attributes that it found... that list does NOT include
> brownAuthenticationProfiles ...
>
> and then MCBLoginServlet starts running, and reports:
>
> > Found idms attribute: null
> > Found [0] values in attribute.
> > > User [stc] used a context NOT on the potential context list. They
> must re-authenticate with a valid context.
>
> So, before I change something ... I'm guessing I need to add an
> AttributeDefinition for the ldap attribute containing the profiles
> available for this user ?
>
> And ... one last question -- I seem to remember that David L developed
> some glue code between the MCB and DUO -- however, I can't find it --
> where do I go to download that ?
>
> Thanks !
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141201/cc868d6a/attachment-0001.html