defining custom password validator in 3.2.0?

[Cantor, Scott]

On 12/14/15, 1:48 PM, "users on behalf of Jeffrey Eaton" <users-bounces at shibboleth.net on behalf of jeaton at cmu.edu> wrote:



>I have had to develop a custom password authentication validation routine for my Shibboleth 3.2.0 server.  

I'm not sure that's possible without copying the flow, given the design. It might be, but it wasn't anything I tested. JAAS was the established way to do that.

>which looks to me like it didn't properly load my bean definition.

No, the problem is the flow definition and how it calls that step. You would have to create an alias.

<alias name="MyActionBeanName" alias="ValidateUsernamePassword"/>

That's already done to control which of the three backends is used now. I guess if that works, then it's more or less accomodated and needs to be documented.

-- Scott