IdP user authendication using mysql user table

[Callum Smith]

Just as an aside I have a small fork that a) is bug fixed for IdPv3 and b) allows you to specify alternative hashing algorithms (md5 being sub-optimal).

Following is from shibboleth-idp/conf/authn/jaas.config

ShibUserPassAuth {
   com.tagish.auth.DBLogin required debug=true dbDriver="com.mysql.jdbc.Driver" 
       dbURL="jdbc:mysql://host/database"
       dbUser="dbuser" dbPassword="dbpass" userTable="table name"
       userColumn="usercol" passColumn="passcol" algorithm="SHA-256";
};

https://dl.dropboxusercontent.com/u/1380669/tagishauth.jar

Use the jar at your own discretion, and I have no intent to maintain it so you may want to consider your own fork. But in the short term should help you get started.

Don't forget to setup your mysql connector.

Regards,

Callum Smith
Instruct & Strubi Web Developer
University of Oxford
e. callum at strubi.ox.ac.uk
p. +44 (0)1865 2 87782

> On 29 Oct 2015, at 10:34, Raja Scientist B (CS) <raja at inflibnet.ac.in> wrote:
> 
> IdPv3
> 
> 
> Thanks,
> Raja V
> 
> 
> On Thu, Oct 29, 2015 at 4:01 PM, Peter Schober <peter.schober at univie.ac.at <mailto:peter.schober at univie.ac.at>> wrote:
> * Raja Scientist B (CS) <raja at inflibnet.ac.in <mailto:raja at inflibnet.ac.in>> [2015-10-29 11:06]:
> > request you to guide me IdP authentication using mysql user table created
> > by me.
> 
> What IDP version?
> 
> For IDPv3 see
> https://wiki.shibboleth.net/confluence/display/IDP30/JAASAuthnConfiguration <https://wiki.shibboleth.net/confluence/display/IDP30/JAASAuthnConfiguration>
> 
> For IDPv2 I wrote up instructions based on the "Tagish" JAAS modules:
> https://shibboleth.net/pipermail/users/2013-October/012728.html <https://shibboleth.net/pipermail/users/2013-October/012728.html>
> (The website seems to be broken a bit -- I'll let Michal know -- but
> the SVN repository with the code is still available.)
> 
> Those instructions are for the FileLogin JAAS module, you would have
> to replace that with use of the DBLogin module, cf.
> https://vcs.ics.muni.cz/repos/shibboleth/jaas-rdbms/trunk/ <https://vcs.ics.muni.cz/repos/shibboleth/jaas-rdbms/trunk/>
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151029/f1fc266a/attachment-0001.html>