JAAS installation for Shibboleth IdP

[Douglas E Engert]

On 7/8/2014 2:48 PM, Marek Denis wrote:
> Hey,
>
> Couple of months ago I asked for some advices for configuration
> Shibboleth IdP *without* LDAP. This is for a kind of Proof-Of-Concept
> so what I need is something that can speak SAML2, can be configured
> but LDAP is probably too heavy to have it inside my configuration
> (also it needs quite a lot of time to have it installed and
> configured).

In you previous note you said 2-3 users for a Proof-of-Concept.

   http://docs.oracle.com/javase/7/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/package-summary.html

list a few other JAAS modules, including a UnixLoginModule (never tried it.)

Then, as Scott said, use a simple script as a data connector.

What do you plan to do if the "Proof-of-Concept" works?

Implement LDAP?

Why not just do LDAP now, you may waste more time trying to avoid ldap
then to implement it.

Do you have AD?

You can use it via LDAP for authentication and attributes.

>
> I was advised to use JAAS
> (http://shibboleth.net/pipermail/users/2013-October/012728.html), but
> is it really a full LDAP replacement? I can see I should be able to
> specify my flat file with username:password pairs but what about othe
> pieces of info so the SAML2 assertion can be built on top of them?
>
> There is really no way to avoid LDAP and do something really easy?
>
> Thanks,
>

-- 

  Douglas E. Engert  <DEEngert at gmail.com>