Grouper Users - Open Discussion List

["Klug, Lawrence" <>]

Okay, we've got Shibboleth working - the only issue now is what to pass in 
REMOTE_USER.  I added a member to the Wheel group that exists in the LDAP 
directory but when logging in we get the error:

Error: 
*       Cant find login subject: 
,
 ADMIN_UI
*       If you continue to encounter errors, please contact technical support.
I saw in your cloud example that you pass REMOTE_USER="eppn persistent-id 
targeted-id"

How does that translate to our environment?

Thanks,

Lawrence

-----Original Message-----
From: Chris Hyzer 
[mailto:]
 
Sent: Wednesday, August 24, 2011 10:22 PM
To: 
;
 
;
 Klug, Lawrence
Subject: RE: [grouper-users] Shibboleth and Grouper

OK, I never understood why these changes were needed, but now I get it.  Im 
used to not having the anonymously accessible information page, if you aren't 
authenticated, you aren't allowed in at all.  One of the other enablers of 
this is to set:

login=Start

in the custom nav.properties so that once the user is logged in, and looking 
at the info page, it says "Start", instead of "Log in".  Btw, I have a 
directory in the UI: grouperExternal/public which can easily not be protected 
by authn (if you have external user registrations, it wont work if its not), 
maybe we should change the info page to be a static HTML page there, or 
something else (dynamic page there).  Well, if the UI is redone in 2.2 we can 
worry about it then :)

Thanks,
Chris


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of 

Sent: Wednesday, August 24, 2011 3:33 AM
To: 
;
 

Subject: Re: [grouper-users] Shibboleth and Grouper

Hi,

Further to Chris' email, at Newcastle University we have also Shibbolised our 
Grouper install. The following page documents some of the steps that we took 
to Shib protect both the main Admin UI and the Lite UI.

https://spaces.internet2.edu/display/Grouper/Newcastle+University+-+Protecting
+UI+With+Shib

I hope they are helpful.

Thanks

Richard James
Infrastructure Systems Administrator
ISS Systems Architecture
Newcastle University