[EP-tech] Shibboleth and local login

[drn at ecs.soton.ac.uk (David R Newman)]

Hi Yuri,

My advice would be that wherever on your EPrints page template 
(archives/ARCHIVENAME/cfg/lang/en/templates/default.xml) you have the 
link "Login" add another link next to it with the name "Local Login" 
that has the href "/cgi/users/login".  You will note that the "Login" 
link has the href "/cgi/users/home if you look at this in your web 
browser.  The EPrints code for Shibboleth causes this to redirect to 
Shibboleth login, if the user is not already logged in.  However, if you 
look for the link in 
archives/ARCHIVENAME/cfg/lang/en/templates/default.xml you will probanly 
see <epc:pin ref="login"/>.  The only problem manually adding a local 
login link  (e.g. <a href="/cgi/users/login">Local Login</a>) to your 
page template is that it will appear even when the user is logged in 
(either locally or using Shibboleth).

One way round this would be to write a local login plugin file that 
inserts this link as part of <epc:pin ref="login"/>, then when this link 
appears can be controlled and you can probably incorporate the redirect 
so you are returned to the page you were on before you tried to login 
(locally).  I can see if I can write this local login plugin file as it 
would be useful to add to the Shibboleth instructions.  However, it is 
not something I will necessarily be able to get done today or maybe even 
tomorrow.

That all said, if a user is on an EPrint abstract page and you cllick on 
the "View Item" link and you are not logged in your will be taken to 
Shibboleth login.  That is why I said before that local users would need 
to know they need to login first before they start clicking on links 
like that.

Regards

David Newman


On 14/12/2017 08:11, Yuri wrote:
> Ok, so I've just to add a link to /shibboleth/login in /cgi/users/login
> for people which want to login using shibboleth, isn't it?
>
> For redirects it is not a problem, but I think /cgi/users/login already
> save the loginparams so send you to the wanted page.
>
>
> Il 13/12/2017 11:25, David R Newman ha scritto:
>> Hi Yuri,
>>
>> The actual login page is http://HOSTNAME/cgi/users/login you could
>> include this link for people who want to login using local login.
>>    However, must the links that require you to login will still always
>> redirect to shibboleth, so you will have to instruct you local uses
>> that they must click on the local login to ensure they are logged in
>> before trying to use any of the logged in user functionality,
>>
>> You might want to do something clever with the login link to ensure the
>> user gets returned to the same page they were on before they realised
>> they need to login.  I am not sure how to do this off the top of my
>> head.
>>
>> Regards
>>
>> David Newman
>>
>> On Wed, 2017-12-13 at 10:53 +0100, Yuri wrote:
>>> Hi!
>>>
>>>     reading and implementing this guide:
>>>
>>> https://wiki.eprints.org/w/Shibboleth
>>>
>>>     every login is handled by Shibboleth. Is there a way to let the
>>> user
>>> choose betsween local and Shibboleth login?
>>>
>>>
>>> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-
>>> tech
>>> *** Archive: http://www.eprints.org/tech.php/
>>> *** EPrints community wiki: http://wiki.eprints.org/
>>> *** EPrints developers Forum: http://forum.eprints.org/
>> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
>> *** Archive: http://www.eprints.org/tech.php/
>> *** EPrints community wiki: http://wiki.eprints.org/
>> *** EPrints developers Forum: http://forum.eprints.org/
>
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive: http://www.eprints.org/tech.php/
> *** EPrints community wiki: http://wiki.eprints.org/
> *** EPrints developers Forum: http://forum.eprints.org/