Shibboleth Developers

[Chad La Joie <>]

Yeah, I'll note that I had ended up abandoning Tomcat's Auth because it
was behaving oddly and the ever changing requirements (or not in some
versions) for that group constraint was a pain.

If you can figure out the right combinations of settings for your
version of Tomcat it seems to work fine.  But figuring it out from the
Tomcat docs is a royal pain.

Jim Fox wrote:
> 
>>
>> Specify to configure Apache to password protect /Authn/RemoteUser, but
>> the web.xml file that is being deployed by the war enables basic
>> authentication by Tomcat (using Tomcat's username/password file).  I
>> disabled the Apache authentication, added an appropriate
>> username/password to the Tomcat file and I get to the next step of the
>> process, but then Shibboleth fails with:
>>
> 
> I went the other way and disabled tomcat's Username/Password
> authentication - keeping apache's.
> 
> Jim

-- 
Chad La Joie             2052-C Harris Bldg
OIS-Middleware           202.687.0124