That is described in https://issues.jasig.org/browse/MAS-63
Yes, it is an HTTP_Header. Would it be better to revert that to
REMOTE_USER? Maybe the envvar can be forecasted by LA-U ?

Torben


|------------>
| Von:       |
|------------>
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
  |"Marvin S. Addison" <[email protected]>                               
                                                              |
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| An:        |
|------------>
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
  |[email protected]                                                     
                                                              |
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Datum:     |
|------------>
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
  |24.02.2012 16:40                                                             
                                                              |
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
|------------>
| Betreff:   |
|------------>
  
>-------------------------------------------------------------------------------------------------------------------------------------------|
  |Re: [cas-user] Fiddling with CASGateway                                      
                                                              |
  
>-------------------------------------------------------------------------------------------------------------------------------------------|





> 1. An User can be authenticated by his ADS-Account against Kerberos ->
grant Access to the location and set HTTP_CAS_USER
> 2. An User can not be authenticated via Kerberberos ->  grabt access
anyway but unset HTTP_CAS_USER
> 3. An User can be authenticated by Kerberos but wants to login with an
different account ->  grant access with his credentials but unset
HTTP_CAS_USER

What is HTTP_CAS_USER in the discussion above?  An HTTP header?  There's
no standard header by that name as far as I know, so what component in
your architecture sets it?



M

--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user




-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to