I would like to have a chain of three possible authentications x509, 
Kerberos, and LDAP.  I've been able to effectively setup x509 falling back 
to LDAP, and Kerberos falling back to LDAP, but what I would like is to 
check for a valid cert, if that fails, do a kerberos exchange, and if that 
fails fall back to username/password backed in LDAP.

The problem seems to be that each of the modules (x509 and kerberos) 
construct the webflow assuming they are the only one doing so (as in 
X509WebflowConfigurer.java). Looking at the documentation on custom webflow 
documentation at 
https://apereo.github.io/cas/5.3.x/installation/Webflow-Customization.html 
seems to suggest that this is a bad idea since you have to create the 
complete webflow in your customization.

Is there some type of pattern where these webflow modifications can be 
chained easily?  Again, any pointers would be helpful.  If there is not 
easy way, is there at least a way I can see the complete webflow after it 
has been constructed so I have a template of what I should be working with?

-Jathan

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/4a6ee67f-5ea6-425b-91a0-600ab89e2e14%40apereo.org.

Reply via email to