Tag Info

New answers tagged

1

We have a Kerberos SSO in our Centos servers, so the problem was related to that. The kerberos ticket only lasts 12 hours and its generated every time we ssh to our servers. So the next day (after a 12 hours period) JBoss could not connect to a network shared folder (because of ticket expiration), does timeout with no error logs related to that. We already ...


1

I dunno if you ever got this solved but i finally managed to sort out this error for the federation i was setting up. If you tell Domino to setup the federation against an ADFS it will set a cookie called DOMSTATE this one needs to be set the whole time. Also note, if you set the Relaystate flag in the saml post back to the domino server the domino server ...


0

You need to: Create a HTTP/hostname.fqdn@REALM.TEST service in FreeIPA Download HTTP service keytab on the web server with ipa-getkeytab and make it accessible to (only) apache Configure apache and mod_auth_kerb to secure some URI with Kerberos See this example or this example. For more advanced integration between your Web service and SSSD, check ...


1

Followed advice from Microsoft support and created claim description items which included the attributes I wanted to include, these were then present in the metadata file. Applying an Issuance Transform allowed me to map values to these attributes.


0

This is normal. The metadata file contains the "claim descriptions" as you say, plus the endpoints of your ADFS farm, the public key of your token signing and token decrypting certificates; general information about your deployment. All of this, but not your relying party configuration (this would be a security issue in my opinion). You must exchange ...



Top 50 recent answers are included