Questions regarding ECP and ExternalAuthN handler

[Carlos Milán Figueredo]

It seems clear enough Scott, thank you for the answer.

Greets,
Carlos

Carlos Milán Figueredo | HispaMSX System Operator |   http://www.hispamsx.org | |  telnet://bbs.hispamsx.org

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: martes, 4 de febrero de 2014 19:50
To: Shib Users
Subject: Re: Questions regarding ECP and ExternalAuthN handler

On 2/4/14, 1:35 PM, "Carlos Milán Figueredo" <cmilanf at hispamsx.org> wrote:

>Is it a problem to use ECP while the only active handler are the 
>ExternalAuthN and the PreviousSession one? I¹m not getting any log 
>trace from ECP, it seems suspicious.

The only thing is supports is basic-auth, or more accurately on the IdP side, REMOTE_USER populated by the container. Clients are basic-auth only in practice. None of the login handlers in v2 have any relevance to ECP support.

>https://myidp.org/idp/profile/SAML2/SOAP/ECP with the web browser, I 
>keep getting an HTTP authentication request over and over. Should I get 
>a SOAP response when the system is working?

If it's protected by basic-auth, you should get an HTTP authentication challenge until you satisfy it.

>I perform the authentication for ECP using JAAS with an LDAP directory.
>But it¹s not clear to me how I have to tell Tomcat the place where the 
>login.config file is.

http://tomcat.apache.org/tomcat-6.0-doc/index.html

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net