shib v3 multiple authentication methods at the same time

Roderick Grau rgrau at albany.edu
Wed Jun 24 11:37:13 EDT 2015


Thank you Scott.  That was very helpful.

Following your suggestion, I enabled the jaas-authn-config.xml in conf/authn/password-auth-config.xml and commented out ldap-auth-config.xml.
Then in conf/authn/jaas.conf, I put the same authentication blocks from login.config in shib 2.  
Added the vt-ldap.3.3.7.jar to edit-webapp/WEB-INF/lib and rebuilt the war.

Both authentication methods are now working.

Thank you again!

> On Jun 24, 2015, at 10:17 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 6/24/15, 10:06 AM, "users on behalf of Roderick Grau" <users-bounces at shibboleth.net on behalf of rgrau at albany.edu> wrote:
> 
> 
> 
>> Our dev/test environment has a requirement to let developers log in as different functional users to test code changes.  On the 2.3.8 IDP this was accomplished with a custom jaas module and ldap configured at the same time.
>> 
>> On the 3.1.1 IDP I can get the custom jass module or the ldap auth to work seperately, but not at the same time.
>> 
>> Is having both authentication methods active at the same time possible?
> 
> Yes, if you copy the auth/Password flow and create your own, it's certainly not trivial at this point. Or just use JAAS for both and stack the modules, which would have been the obvious way to do it before I would think.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

--
Roderick Grau
Enterprise Infrastructure Services
University at Albany
1400 Washington Avenue Ext.
Albany, New York 12222



More information about the users mailing list