jaas authentication failover

[Liam Hoekenga]

>
> Sufficient means "first one that works is good enough", it's a simple
> chain. Or you can do the same thing with the configuration out of the box
> by just including a list of multiple application names from the JAAS
> configuration with one module defined in each one; that's equivalent to
> sufficient but with more precise error message mapping.
>

The issue ended being tied to the arguments I was providing to the kerberos
authenticator
https://marc.info/?l=shibboleth-users&m=155364562308747&w=2

Is there information on mapping the error messages returned by the JAAS
module to text that we to show our users?

Any pointers on choosing a JAAS configuration based on the principal name?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190327/e4a2cec0/attachment.html>