IdP 3: error on SAML 1 AttributeQuery

Cantor, Scott cantor.2 at osu.edu
Wed Mar 18 13:47:36 EDT 2015


On 3/18/15, 1:44 PM, "Sara Hopkins" <sara.hopkins at ed.ac.uk> wrote:
>
>> I would have to conclude he doesn't have it configured for that. You
>> have to set a wantClientAuth option on the connector, or it won't
>> work.
>
>OK, many thanks, I guess it's that then. It looks to me as if 
>jetty.ssl.wantClientAuth=true is the default, because it's commented out 
>in my config; I suppose he must have set it to false in his config for 
>some reason.

Oh, it's the default if the special plugin is configured on the connector. It's not the defalt in Jetty, it's set to true internally in that plugin. So if it's not set, and the plugin's not used, then you'd have no cert presented.

-- Scott



More information about the users mailing list