authentication failure reasons in IdP logs

[David Bantz]

Thank you so much Daniel for your detailed and patient response !

It seems my IdP and backend authentication stores are behaving appropriately
in response to some users' persistent submission of incorrect credentials, 
thanks to your robust and flexible LDAP authenticator.

Sorry I had to be nearly bludgeoned to get it.

David Bantz

On Fri, 20 Jun 2014, at 19:55 , Daniel Fisher <dfisher at vt.edu> wrote:

> ...
> I believe the answer to most of your questions is in the JAAS
> documentation, specifically:
> http://docs.oracle.com/javase/7/docs/api/javax/security/auth/login/LoginContext.html#login()
> "In the case where multiple LoginModules fail, this method propagates
> the exception raised by the first LoginModule which failed."
> 
> So the exception that is ultimately thrown and then logged whenever
> both login modules fail is always the exception thrown from the first
> module...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20140620/c02c4557/attachment.bin