Client persistent storage not remembering user
Thomas Colin de Verdière
tdeverdiere at kapit.fr
Tue Apr 24 14:39:44 EDT 2018
Hello,
I don't know if it is the simplest solution, but i am trying to implement
the cookie reading using authn/External login flow.
So i edit
*conf/authn/external-authn-config.xml*I replace externalAuthnPath with a
servletRelative:/rememberme
<bean id="shibboleth.authn.External.externalAuthnPath"
class="java.lang.String"
c:_0="servletRelative:/rememberme" />
I also tried without / : servletRelative:rememberme
Then i edit :
shibboleth-idp\webapp\WEB-INF\web.xml
and add :
<!-- Servlet protected by container used for Remember me authentication
-->
<servlet>
<servlet-name>rememberme</servlet-name>
<jsp-file>/WEB-INF/jsp/rememberme.jsp</jsp-file>
</servlet>
<servlet-mapping>
<servlet-name>rememberme</servlet-name>
<url-pattern>/rememberme</url-pattern>
</servlet-mapping>
--
And wrote rememberme.jsp :
<%@ page import="net.shibboleth.idp.authn.*" %>
<%
final org.springframework.web.context.WebApplicationContext springContext =
org.springframework.web.context.support.WebApplicationContextUtils.getRequiredWebApplicationContext(request.getServletContext());
System.out.println("------ REMEMBER ME LOGIN ------ ");
%>
But the message is never written on Tomcat logs whereas i put the same
System.out inside the metatada.jsp file and i saw the message inside Tomcat
localhost.log
The rememberme.jsp is compiled by the server because there are compilation
error in logs if there are error inside.
What do i missed to active the authn/External login flow ?
Thomas
2018-04-20 17:00 GMT+02:00 Thomas Colin de Verdière <tdeverdiere at kapit.fr>:
> > What you're asking about is a login flow that logs somebody in using a
> cookie, and there is no reason to do anything with Spring Security to
> implement that
>
> Yes that is possible only with cookies.
>
> 2018-04-20 15:41 GMT+02:00 Cantor, Scott <cantor.2 at osu.edu>:
>
>> > What are the entry points in Shibboleth to use the Spring Security
>> > implementation ? Does someone already do that ?
>>
>> What you're asking about is a login flow that logs somebody in using a
>> cookie, and there is no reason to do anything with Spring Security to
>> implement that.
>>
>> -- Scott
>>
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180424/129d6655/attachment.html>
More information about the users
mailing list