Re: [Bodington-developers] Testing SP : groups-xml-mapper-policy

[Matthew B. <mat...@ou...>]

Alistair Young wrote:
> Interesting question and the answer I suspect depends on the answer  
> to this one:
> 
> I logged in to Bod1 using Bod2 as an IdP. I logged in as sysadmin on  
> Bod2's IdP and got into Bod1 using the shibb authenticator but wasn't  
> made a sysadmin. I was put into the sysadmins group as  
> sys...@ww....

The sysadmin group doesn't get any extra rights in a standard Bod 
install I think. The group with all the power is the /site owners group 
which by default contains sysadmin and has sysadmin permission.

If you grant the sysadmin group sysadmin permission to the /site 
resource this should work.

>> Is it possible to set it up to allow both shibb and another
>> authentication mechanism to work at the same time?

The reason I asked was we currently have 3 authentication methods 
(anonymous, internal and WebAuth) here at Oxford.

-- 
  -- Matthew Buckett, VLE Developer
  -- Learning Technologies Group, Oxford University Computing Services
  -- Tel: +44 (0)1865 283660 http://www.oucs.ox.ac.uk/ltg/