[shib_auth] logging in a drupal user with a shib session fromanother log in

Michael.OBrien Michael.OBrien at ul.ie
Sat May 21 08:23:10 CEST 2011


When you say the login button is there do you mean that you get asked to login if you try to access some content restricted to only authenticated users or do you mean the physical login button is just still shown?

Are you using lazy sessions or is shibboleth required to every node and part of your site?
What happens when you try to access a part of your site restricted to authorised users only?


-----Original Message-----
From: shib_auth-bounces at listserv.niif.hu on behalf of Kristof Bajnok
Sent: Fri 20/05/2011 22:07
To: shib_auth at listserv.niif.hu
Subject: Re: [shib_auth] logging in a drupal user with a shib session fromanother log in
 
On 2011. May 20. 21:12:22 Tommy Peterson wrote:
> The problem I can't seem to understand, which is probably related to me
> being very new to this module and somewhat to Drupal, is that when I
> access the drupal site configured to be controlled by Shibboleth after
> already logging in to Shibboleth, I am not logged into Drupal. The login
> button is still there. How can I make th is work? Basically, I have
> another application on the same server controlled by shibboleth. I log in
> there. But when I access the drupal site/pages, with the shibboleth
> session still active, again, I still see the Drupal pages' log in button
> and am not logged in. 

Most common problem is that Shibboleth is not protecting your Drupal 
installation path, either because there is no 'require shibboleth' stanza for 
the directory or because of an http/https problem.

> Also, if I want to make things simple for myself and my installation and
> have Drupal/shib-auth look for server variables named "mail" and "name"
> instead 'HTTP_SHIB_MAIL' and   'REMOTE_USER' is it just a simple matter of
> updating the $var_store array like so in the
> drupal/modules/shib_auth/shib_auth.module file? Anything else that I need
> to do? 
> 'email_variable' => 'mail',
> 'username_variable' => 'name',

No, the proper way is to use the configuration interface. Look for 
Administer/User management/Shibboleth settings.

Kristof

_______________________________________________
shib_auth mailing list
shib_auth at listserv.niif.hu
https://listserv.niif.hu/mailman/listinfo/shib_auth

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 4004 bytes
Desc: not available
URL: <https://listserv.niif.hu/pipermail/shib_auth/attachments/20110521/63c79b56/attachment.bin>


More information about the shib_auth mailing list