Shibboleth Authentication in VCL

2012-02-23 Thread Evelio Quiros
Hello, We are trying to configure Shibboleth for VCL. We have gotten to the point where a user is able to log in successfully, so the $_SERVER values are ok, but it does not add the new user into the database. Doing a search for that username shows nothing, even though we were able to login

Re: Shibboleth Authentication in VCL

2012-02-23 Thread Evelio Quiros
On 2/23/12 3:08 PM, Josh Thompson josh_thomp...@ncsu.edu wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Al, Are you using Shibboleth by itself or in conjunction with LDAP? If not with LDAP, do you have affiliation.shibonly set to 1 for any affiliations logging in with Shibboleth?

Re: Shibboleth Authentication in VCL

2012-02-23 Thread Evelio Quiros
Ok, we see two affiliations in the database, Local Global. Both were set to 0. We are using Shibboleth without LDAP, since Shib uses LDAP in it's back end authentication. We set the Global shibonly field to 1 and tried it. It still behaves the same, no new users are entered in the database.

Re: Shibboleth Authentication in VCL

2012-02-23 Thread Aaron Coburn
Al, There are a variety of things to check. First, in .ht-inc/conf.php, make sure that you have an affiliation configured under $authMechs This might look something like this: $authMechs = array( Institution Name = array(type = redirect,