Problem with /idp/AuthnEngine

[Seth Ristow]

> If you mean something like SPNEGO, there's basically a 100% chance that it's at fault if you're asking for my opinion.

It appears you are correct. 

When using the Redirect handler, I see this in the logs:

15:46:07.190 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:464] - [TP-Processor22:] - Selecting appropriate login handler from filtered set {urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos=ch.SWITCH.aai.idp.kerberos.KrbLoginHandler at 2d5b453, urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler at 1c31b699}
15:46:07.191 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:497] - [TP-Processor22:] - Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler

When using the POST handler, I see this instead:

15:47:10.026 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:464] - [TP-Processor3:] - Selecting appropriate login handler from filtered set {urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos=ch.SWITCH.aai.idp.kerberos.KrbLoginHandler at 2d5b453, urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler at 1c31b699}
15:47:10.026 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:497] - [TP-Processor3:] - Authenticating user with login handler of type ch.SWITCH.aai.idp.kerberos.KrbLoginHandler

So it's selecting the Kerberos login handler instead of the UsernamePassword handler, and therefore not redirecting me. How can I give the UsernamePassword handler priority?

Seth Ristow
Lincoln Public Schools