IdPV3 - specify which jaas config to use?

[Bosky, Dave]

Yes, that's what I meant. Each application uses a different LDAP configuration for password-based login. 
So there's really no way to select which LDAP to use for each application?

~Dave

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, February 18, 2016 3:19 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: IdPV3 - specify which jaas config to use?

> We use the IdP with two web applications - email and tv.

I can only translate that into an actual use case based on a lot of assumptions. I think you're asking how to support separate password-based login behavior based on application, which is defnitely not "typical" with either V2 or V3.

> How can I specify which JAAS configuration to use for each one for 
> username/password authentication?

The password flow supports cascading of multiple JAAS configs, but does not support selection of them. That probably could be worked in at the cost of the config getting a bit hairy, but it's workable. As it stands now, you would have to deploy your own copy of the password flow by duplicating it with a separate/different configuration, a lot of Spring wiring and digging into things, I don't have much I could give you to help with that.

> In IdPV2 I used to specify which one in the web application web.xml 
> file like below.

Not at all applicable.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
HTC Disclaimer:  The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.  If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer.  Thank you.
**********************************************************************