How many login handlers do you have enabled for shib? If you turn up the IDP logging to SHIB, you can tell which handler is taking over the login request. Chances are, it's not the CAS external handler because you have more than one enabled in your shib config and SP isn't requesting an authN method explicitly.
-Misagh > -----Original Message----- > From: Stein, Eric [mailto:[email protected]] > Sent: Tuesday, March 12, 2013 9:43 AM > To: [email protected] > Subject: [cas-user] Shibboleth in front of CAS > > I'm trying to run Shibboleth using CAS as the authentication provider. I > followed these directions for setting things up: > https://github.com/Unicon/shib-cas-authenticator#readme > I tried running a test of Shibboleth against TestShib.org and I'm getting a > FatalProfileException message. Here's an abbreviated > > idp-process.log > 07:27:11.749 - ERROR > [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:618] - No > user identified by login handler. > 07:27:11.764 - ERROR > [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] - > Authentication failed with the error: > edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No > user identified by login handler. > at > edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.validat eSu > ccessfulAuthentication(AuthenticationEngine.java:619) [shibboleth- > identityprovider-2.3.8.jar:na] > at > edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.complet eAu > thentication(AuthenticationEngine.java:537) [shibboleth-identityprovider- > 2.3.8.jar:na] > at > edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.service (Au > thenticationEngine.java:225) [shibboleth-identityprovider-2.3.8.jar:na] > [...] > > > Does anybody know what might be causing this? I can provide any configuration > files, but I didn't want to spam with everything and I don't know what's > important. > > Thanks, > Eric > > -- > You are currently subscribed to [email protected] as: > [email protected] To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
