Password login flow & Kerberos

[FUGAGNOLI Bertrand]

Hi all,

I succeed in configure Password login flown with Kerberos with:



-       authn/password-authn-config.xml

-       authn/krb5-authn-config.xml


ð  Authentication is provided with Kerberos accounts which not the SERVICE/principal corresponding to keytab , like john.doe / password !

After that, I tried to configure :


-       c14n/subject-c14n.xml
(I uncomment <bean id="c14n/attribute" parent="shibboleth.PostLoginSubjectCanonicalizationFlow" />...)

-       c14n/simple-subject-c14n-config.xml
(I uncomment and configure with my domain <bean parent="shibboleth.Pair" p:first="^(.+)@EXAMPLE\.ORG$" p:second="$1" />>...)


ð  In order to send the usename which I authenticate (john.doe) as a UID attribute to SPs...

My attribute-filter.xml file contains :

<AttributeRule attributeID="principalName">
            <PermitValueRule xsi:type="ANY" />
        </AttributeRule>

My problems is :


-       I don't succeed to configure attribute-resolver.xml to resolve my Kerberos authentication username as UID...

Any help will be appreciated!
Thanks a lot.

Bertrand Fugagnoli
[@@OPEN@@]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160718/5cab2dfe/attachment.html>