1. An User can be authenticated by his ADS-Account against Kerberos ->  grant 
Access to the location and set HTTP_CAS_USER
2. An User can not be authenticated via Kerberberos ->  grabt access anyway but 
unset HTTP_CAS_USER
3. An User can be authenticated by Kerberos but wants to login with an different 
account ->  grant access with his credentials but unset HTTP_CAS_USER

What is HTTP_CAS_USER in the discussion above? An HTTP header? There's no standard header by that name as far as I know, so what component in your architecture sets it?

M

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to