Transforms on RemoteUser

Simon Lundström simlu at su.se
Wed May 9 07:50:52 EDT 2018


On Tue, 2018-05-08 at 13:22:36 +0000, Cantor, Scott wrote:
>> Sadly, that doesn't work (I have tried it). And I suspect it has something to do
>> with RemoteUser being an "External" Servlet-thingy.
>
>No, it would work fine.

Perfect!

I see now that I made two errors:
1, The regex was too greedy so it matched everything instead of just the 
username.
2, I didn't troubleshoot enough when a co-worker was having issues (I 
was just about to leave so I reverted and never went back to why it 
broke). The problem was that the user already had an existing session 
where the username already was scoped with the realm and when the IDP 
tried to resolve the attributes with a scoped user as uid well it blew 
up.

Since this is just test I'll just ask everyone to reset their sessions 
and when I do the prod release I'll do it in evening/night when sessions 
are bound to expire.

Thanks as always Scott!

BR,
- Simon


More information about the users mailing list