<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Kevin,<br>
<br>
The exact thing we want to do is the two-factor authentication should
be completely done in IDP (both LDAP and token) and IDP runs as a
Tomcat application. Now the question is how do I use this apache module
to perform the token authentication which has to be done in the IDP
side.<br>
<br>
The secured directory in SP is protected like<br>
<br>
<Directory "/var/www/html/oath-protected"><br>
AuthType Shibboleth<br>
ShibRequireSession On<br>
ShibApplicationId default<br>
ShibExportAssertion On<br>
Require Shibboleth<br>
</Directory><br>
<br>
<br>
Thanks<br>
-Badri<br>
<br>
Kevin P. Foote wrote:
<blockquote
cite="mid:alpine.LFD.2.02.1204110810520.27705@denali.cc.iup.edu"
type="cite">
<pre wrap="">Just a config question...
Have you set up the www server (apache) such that the mod_auth_otp is
enabled, used and being called?
This is referenced in the setup guide you are following under the
OAUTH-HOTP example section..
------
thanks
kevin.foote
On Wed, 11 Apr 2012, Badri wrote:
-> Hi Shibboleth user group,
->
-> We have chosen Shibboleth for SSO and Two Factor Authentication and implemented the SSO on our web server. We
-> have the Service Provider, Identity Provider, LDAP, Apache web server configured and the SSO works well in our
-> web servers.
-> Say for example, subdomain1.xxxx.com and subdomain2.xxxx.com works with Shibboleth's SSO connected with our own
-> LDAP authentication server.
->
-> Now we are in a need to implement Two factor authentication and came to know the solution available in the
-> documentation at
-> <a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/Multi+Factor+Login+Handler">https://wiki.shibboleth.net/confluence/display/SHIB2/Multi+Factor+Login+Handler</a>
->
-> We have followed this documentation and tried to add the TFA feature to our server but it did not work
-> properly. The Identity provider is rebuilt with the following jar files along with the configuration changes
-> mentioned in the the documentations for files like
-> web.xml, handler.xml, login.conf, logging.xml.
->
-> Yubico validation client : yubico-validation-client-2.0-pre1-shib.jar
-> Multifactor login handler :multifactor-login-handler-0.1.jar
->
-> Now we get the new login.jsp and it asks the "username", "password" and "token" but the the token functionality
-> is not working. The authentication is successful with just the ldap login.
->
-> Is there any advice you can give us on how to enable TFA in Shibboleth??? Also we would like to know how the
-> apache module for otp works here and how a directory should be protected with multifactor auth?? The
-> documentation I have pointed to uses AuthType basic.
->
-> Any advice would be much appreciated. Thanks
->
-> - Badri
->
->
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
<pre wrap="">
<hr size="4" width="90%">
Internal Virus Database is out of date.
Checked by AVG - <a class="moz-txt-link-abbreviated" href="http://www.avg.com">www.avg.com</a>
Version: 8.5.449 / Virus Database: 271.1.1/3765 - Release Date: 07/14/11 18:38:00
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Warm Regards,
K.BADRI NARAYANAN</pre>
</body>
</html>