Need help: Remote user auth via httpd using mod_jk connector

[Satheesh Kumar]

Thanks Scott,
Actually I was using Remote user flow, mistakenly added the remote user
internal configs here...
    I resolved the issue, used auth type as basic in Apache to authenticate
the user.
         Basically I want to use login page instead of the popup to get
user credentials. So I tried with mod_auth_form in apache to handle login
page.   But when I use auth type as mod_auth_form ,  while redirecting to
login page I am loosing the request uri from sp.
 I have to configure Apache to  preserve this incoming uri and after
authentication Apache will call Tomcat (IDP)with that remote user+ uri via
mod_jk connector.
     I need to configure this uri handling in apache, kindly let me know if
you have any suggestions on this...

Thanks,
Satheesh









On 04-Aug-2017 6:53 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

On 8/4/17, 8:02 AM, "users on behalf of Satheesh Kumar" <
users-bounces at shibboleth.net on behalf of satheeshvsbk at gmail.com> wrote:

> So I read the documentation and did below config:

You're configuring two different mechanisms. Pick one of the RemoteUser
flows and configure that one. Editing web.xml is unrelated to using the
RemoteUserInternal flow.

> After authenting the user via apache, on redirecting to IDP I get below
error:

You don't redirect to the IdP, so I would imagine whatever you're doing is
totally wrong. SPs redirect the browser to the IdP, not you. At no time do
you redirect anything to /Authn/RemoteUser. That's handled by the IdP
itself internally.

If you want to use RemoteUser, and not RemoteUserInternal, then you
configure Apache to protect the /idp/Authn/RemoteUser location, and that's
it.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.
net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170805/057536b6/attachment.html>