Kerberos Login Handler and Username/Password

Kevin Ratcliffe kratcliffe at bolton-sfc.ac.uk
Wed Oct 7 02:28:22 EDT 2015


Thank you for your quick reply Scott.

So am I correct in thinking that the spnegoscript.js called from login.jsp just won't work?

function spnego(sp, ip)
{

//check machine in campus IP range
  if (ip.indexOf("10.",0) == 0)
    {
       window.location = "/idp/Authn/Kerberos/Login";
    }
     else
         {
            return;
         }

}

Would there be any benefit upgrading to idp v3 to achieve my goal of detecting if an authentication request is from outside of our campus range then authenticate with username/password?

Sorry if I'm being unclear.

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 06 October 2015 16:23
To: Shib Users <users at shibboleth.net>
Subject: Re: Kerberos Login Handler and Username/Password

On 10/6/15, 10:58 AM, "users on behalf of Kevin Ratcliffe" <users-bounces at shibboleth.net on behalf of kratcliffe at bolton-sfc.ac.uk> wrote:



>I've turned on debugging and to be perfectly honest, the resulting log means very little to me, but my suspicion is that the username/password handler isn't being used while the Kerberos handler is enabled.

Yes, it's picking one handler that satisfies the request and running it, that's all V2 does, pretty much.

Making both work at once within the same request sequence is something that would have to be a feature of one of the login handlers alone, the IdP itself doesn't support that.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This email has been scanned by BSFC and seems to be OK



More information about the users mailing list