Re: used shibboleth

2009-03-29 Thread Joe Little
is that shibboleth really operates more at the >>>>>>>> apache/web >>>>>>>> server layer. Because of that I'm wondering what if anything really >>>>>>>> needs to >>>>>>>> be done at the app layer. &g

Re: used shibboleth

2009-03-28 Thread TW
ly customizable. But, I'm happy to share whatever I come up with when I get there. Tim UCLA GSE&IS On Mar 28, 2009, at 8:34 PM, Daniel Beatty wrote: Begin forwarded message: From: Daniel Beatty Date: March 28, 2009 10:10:29 PM CDT To: Joe Little Cc: Daniel Beatty Subject: Re: u

Fwd: used shibboleth

2009-03-28 Thread Daniel Beatty
Begin forwarded message: From: Daniel Beatty Date: March 28, 2009 10:10:29 PM CDT To: Joe Little Cc: Daniel Beatty Subject: Re: used shibboleth Greetings Joe, Any parsing on that string? Does it contain information as to what "realm" or authority granted the ticket? In my

Re: used shibboleth

2009-03-28 Thread Joe Little
>>>> authenticated? >>>>> >>>>> Chuck >>>> >>>> My apps will definitely need to know who the user is. Apparently, with >>>> shibboleth you can designate somehow that certain data gets sent back to >>>> the >

Re: used shibboleth

2009-03-28 Thread Joe Little
will definitely need to know who the user is. Apparently, with >>> shibboleth you can designate somehow that certain data gets sent back to the >>> requesting server - I think in the http headers. So, I'm assuming that >>> there's some intention to return something t

Re: used shibboleth

2009-03-27 Thread Daniel Beatty
r if we choose to use this instead of our LDAP auth. Have you looked at or used shibboleth Chuck? I have looked at it very briefly. I have worked with Cosign and WebAuth which are somewhat similar. Both of those return the sign- on ID in the REMOTE_USER header. Shibboleth, IIRC does not

Re: used shibboleth

2009-03-11 Thread Chuck Hill
t the returned items are. I'd think that a very good idea. If it works as described, is sounds like it has the potential to make authentication to my apps easier if we choose to use this instead of our LDAP auth. Have you looked at or used shibboleth Chuck? I have looked at it very

Re: used shibboleth

2009-03-11 Thread TW
escribed, is sounds like it has the potential to make authentication to my apps easier if we choose to use this instead of our LDAP auth. Have you looked at or used shibboleth Chuck? Tim Worman Programmer/Analyst III, UCLA GSE&IS ___ Do not pos

Re: used shibboleth

2009-03-11 Thread Chuck Hill
On Mar 11, 2009, at 6:31 PM, TW wrote: All: Our campus is going to be moving to shibboleth as the preferred sso authentication system for web apps. Has anyone here had any experience with deploying web objects apps behind this authentication mechanism? My understanding is that shibboleth

used shibboleth

2009-03-11 Thread TW
All: Our campus is going to be moving to shibboleth as the preferred sso authentication system for web apps. Has anyone here had any experience with deploying web objects apps behind this authentication mechanism? My understanding is that shibboleth really operates more at the apache/ web