ipsilon

#492 Recovered: When --krb yes and user does not have a TGT and authenticates via PAM, no redirect back to SP happens
Closed: Duplicate by t0xic0der. Opened by t0xic0der.

Closed: Duplicate
Reopen Issue

When Ipsilon server is configured both with PAM and Kerberos login managers, no redirect back to the service provider happens if the user does not have a Kerberos ticket and just logs in via PAM (logon form).

The sequence of HTTP requests is:

GET /idp/saml2/SSO/Redirect?SAMLRequest=... 303
GET /idp/login?ipsilon_transaction_id=079... 303
GET /idp/login/krb/negotiate?ipsilon_transaction_id=079... 401

at which point the logon form is presented, and upon entering correct login and password

POST /idp/login/pam 303
GET /idp/ 200

I'd expect redirect back to SP to happen.

This is with ipsilon-tools-0.4.0-1.fc21.noarch.

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.

Metadata Update from @t0xic0der:
- Issue close_status updated to: Duplicate
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.