apache2/idp kerberos RemoteUserInternal with Password flow fallback

Cantor, Scott cantor.2 at osu.edu
Fri May 29 11:28:49 EDT 2015


On 5/29/15, 10:59 AM, "users on behalf of Raffael Sahli" <users-bounces at shibboleth.net on behalf of sahli at gyselroth.com> wrote:

>On 05/29/2015 3:38 PM, Cantor, Scott wrote:
>>>"order in the descriptor list" means "idp.authn.flows = Password|RemoteUser" ?
>>>Or is there another way to order the flows?
>
>>Order in the general-authn config file where the beans are defined. The order in the property means nothing, that's a regular expression.
>
>
>Argh, crazy this works! Thanks Scott, was searching for hours ^^.
>Maybe this should placed somewhere in the wiki, probably it is, but wasn't clear for me.

I think that's because it's not actually true. I don't think there is a guaranteed ordering. If you have multiple methods installed that handle the same kinds of requests, it does not guarantee any particular order. I'm still reviewing code, but I don't think there's any current guarantee over it, and it's documented as such.

-- Scott



More information about the users mailing list