Fix shibboleth authentication checking

Need to check shibboleth auth username to the original auth username,
not the Horde username (since the Horde username may have been altered
post-login by a hook).

diff --git a/framework/Core/lib/Horde/Core/Auth/Shibboleth.php b/framework/Core/lib/Horde/Core/Auth/Shibboleth.php
index 35bf9eb..4bfec06 100644 (file)
--- a/framework/Core/lib/Horde/Core/Auth/Shibboleth.php
+++ b/framework/Core/lib/Horde/Core/Auth/Shibboleth.php
@@ -24,7 +24,7 @@ class Horde_Core_Auth_Shibboleth extends Horde_Auth_Shibboleth
     public function validateAuth()
     {
         return !empty($_SERVER[$this->getParam('username_header')]) &&
-               ($this->_removeScope($_SERVER[$this->getParam('username_header')]) == $GLOBALS['registry']->getAuth());
+               ($this->_removeScope($_SERVER[$this->getParam('username_header')]) == $GLOBALS['registry']->getAuth('original'));
     }
 
 }