Thanks for the fix! I still have the developer role over at OpenSSO, so I should be able to commit it.

However that code belongs to Oracle and I no longer work there, so, unfortunately, I don’t think I can push it to drupal.org

Cheers,

Pat

I was looking through your module and might’ve found a bug:
http://pastie.org/823011

// Need to parse name/value pairs, to get value for Drupal username
attribute

$lines = explode(“\n”, $response->data);
reset($lines);

foreach ($lines as $line) {
if ($line == (‘userdetails.attribute.name=’ .
OPENSSO_DRUPAL_USERNAME_ATTRIBUTE)) {

// ‘current’ line holds attribute value
// 28 points to character after ‘userdetails.attribute.value=’
$name = substr(current($lines), 28);
break;
}
next($lines); // <——— This was missing
}

return $name;
} // function _opensso_get_name

Thanks for writing this module, please upload it to drupal.org A lot
of people can contribute and benefit from bug fixes while it's on
drupal.org.

Cheers,

Yonas

Yes, you can use SPNEGO to do SSO across Microsoft web infrastructure, but I don’t think it scales to thousands of IdP’s accessing an SP. To use SPNEGO, you would have to ‘kerberize’ the SP for all the IdP AD domain controllers, adding identities in each IdP’s AD and copying keytab files. Ugh!

Jonathan

Adam