[shib_auth] unauthorized user geting authenticated

[Kristof Bajnok]

Hi Cesar,

On 2014-11-13 18:35, cesar ceballos wrote:
> If a valid user for SSO that does not belong to those allowed to log
> into my website tries to access it via https, it gets correctly refused.
> But then after receving the authorization fail, if the user changes to
> http access, it acceess the site being authenticatd (registered as
> "authenticathed user").

How do you block the users? What is the exact message that you receive
when you log in with an unauthorized user?

Kristof