Grouper Users - Open Discussion List

[Robert Bradley <>]

On 21/08/15 14:07, Waldbieser, Carl wrote:
> Baron,
> 
> We just ended up placing an authenticating CAS proxy in front of the
> Grouper UI. I had success with both mod_auth_cas [1] and txcasproxy
> [2] in development.  We are currently using mod_auth_cas in
> production.
> 
> Basically, you can use any authenticating proxy that either sets
> "REMOTE_USER" as an environment variable in the Grouper process or
> sets "REMOTE_USER" as an HTTP header.  Grouper must explicitly be
> configured to accept the authenticated user as a header.  The name is
> configurable, too.
> 


I think if you go down that route, you need the web.xml modifications
from
https://spaces.internet2.edu/display/Grouper/Newcastle+University+-+Protecting+UI+With+Shib,
but otherwise I would suggest that method too.  We are using Apache and
mod_webauth in a similar setup and it works well.

-- 
Dr Robert Bradley
Identity and Access Management, IT Services, University of Oxford

Attachment: signature.asc
Description: OpenPGP digital signature