>>>>> "Stuart" == Stuart Rankin <[log in to unmask]> writes:
Stuart> Hi Stefan, Those lines didn't exist (I note that they don't
Stuart> on the live DVD either), but if I add them gssapi fails
Stuart> consistently (even with a non-null user). I.e. every ssh
Stuart> attempt falls though to asking for a password.
They are only needed if you are processing GSS-API attributes from the
attribute-map rather than just SAML attributes.
Typically that causing failure means you don't have the Shibboleth
plugin installed (it may be in a separate package) or the config of your
gssapi attribute map is wrong.
--Sam
|