Shibboleth Developers

["RL 'Bob' Morgan" <>]

On Tue, 12 Aug 2003, Scott Cantor wrote:

> I'm working on divorcing my HS from my web-iso here with some partial
> success. It's really poorly documented, but I've managed to get Tomcat
> to do user logins against Kerberos using basic-auth and pass that into
> the HS servlet. This is done with configuration commands in server.xml
> and web.xml using the JAAS Realm support in Tomcat and the JDK 1.4
> Kerberos PAM module.

Along this line I was going to suggest, having pointed people recently at
demos, that it would be good if Example State could do form-based authn
rather than basic auth.  Beyond looking somewhat less primitive, it would
also be a place where we could say "this is the sort of login form
provided by campus web signon systems, blah blah", so as to make the
process somewhat more understandable.  I suppose it hasn't been worth
setting up a webiso for this, but maybe worth deploying using what you're
describing here.

 - RL "Bob"


------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--