SAML + Kerberos: Get LDAP attributes

UCS - Univention Corporate Server
#1

Hi,

it don’t seems to be possible to get LDAP attributes if kerberos authentication is used:

PHP Notice:  Use of undefined constant givenName - assumed 'givenName' in /etc/simplesamlphp/authsources.php on line 127: /var/www/saml/php-cgi

Is it possible to fix this?

Kind regards,
SirTux

#2

Strange. I’ve changed nothing, but it seems to be working now.

But it isn’t working on Linux. The reason seems to be that Firefox on UCC request a ticket for HTTP/dc-master.$domain or HTTP/dc-backup.$domain and not for HTTP/ucs-sso.$domain.

Mastodon