How to perform Conditional Authentication from LDAP and SQL based on SP name or any value?

[dalipcse91]

Hi Team,

I have two user storage, one is SQL server and other one is LDAP. I have
configured both in JAAS.config file. User getting authenticated
successfully.
My problem is that "Authentication flow checks user in both storage
sequentially with Sufficient flag.
Is there any way to tell shibboleth to use sql or ldap for authentication
based on entered user email's domain name ? I mean to say "if user email's
domain is "samsung.com" then authenticate this user from ldap else from sql
"?

My JAAS.config :
ShibUserPassAuth {

	      /*
	com.sun.security.auth.module.Krb5LoginModule required;
	*/	
 
	 
			com.tagish.auth.DBLogin sufficient  debug=true
            dbDriver="com.microsoft.sqlserver.jdbc.SQLServerDriver"
           
dbURL="jdbc:sqlserver://IND107\\IND107;user=sa;password=Welcome1234;database=IDP"
            userTable="Users"
            userColumn="UserName"
			passColumn="Password";			
	
			
	  org.ldaptive.jaas.LdapLoginModule sufficient
      ldapUrl="ldap://mp2052r2-roja2.sotiindia.edu:389"
      baseDn="dc=meatoffice,dc=edu"
      bindDn="CN=Administrator,CN=Users,DC=meatoffice,DC=edu" 
      bindCredential="Welcome1234" 
      subtreeSearch= "true" 
      userFilter="userPrincipalName={user}";
			
 
			
};

Looking for valuable response.




--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html