X.509 Authentication & How to set principalName

[nduan at dtechspace.com]

Thanks Nate and others who provided helpful information.  It looks like 
your suggestion of using REMOTE_USER login with server-managed PKI 
security would be a simple choice.

Once the user is authenticated using X.509 cert in 2-way SSL setting, 
I'd like to get the user attribute returned from LDAP.  The LDAP 
resolver requires the parameter $requestContext.principalName to 
retrieve user attributes.  Is there any simple way to set the 
principalName to be the user DN retrieved from the cert automatically?  
Or do I have to create a customized login module to set principalName 
programmatically?

Thanks!

ND

On 2014-02-17 09:55, Nate Klingenstein wrote:
> ND,
> 
> https://wiki.shibboleth.net/confluence/display/SHIB2/X.509+Login+Handler
> 
> It's contributed rather than part of the core distribution.
> 
> You could also just use the REMOTE_USER login handler and x.509
> authentication managed by the web environment.
> 
> Thanks,
> Nate.
> 
> On Feb 17, 2014, at 9:46 AM, <nduan at dtechspace.com>
>  wrote:
> 
>> Is there a login module for X.509 authentication available in
>> Shibboleth IdP?
>> 
>> Thanks!
>> 
>> ND
>> --
>> To unsubscribe from this list send an email to 
>> users-unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net