X509 Authn behind Apache proxy

[Ian Bobbitt]

On 6/22/17 8:22 PM, Cantor, Scott wrote:
> You could write a Java servlet filter to wrap all this and populate the standard attribute (which is what you'd have to do if you want to do this now) and I'm not sure in the scheme of things if that wouldn't be the best choice anyway, just to maintain some separation.

I got this working with a pretty simple servlet filter that I'll be happy to share after some cleanup.

I got jumping from the authn/Password flow to authn/X509 working, but I would like to let the user jump back to the
start of authn/Password too. Is there a reason the autn/X509 flow starts off redirecting you to an outside jsp rather
than a normal Spring view?

Incidentally, the stock x509-prompt.jsp links to a URL in the SHIB2 document tree
(https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPassLoginPage) for how to customize it.

-- Ian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4090 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170727/3464de35/attachment.p7s>