Prevent errors when saml authenticator is used along side of another authenticator.

For example basic/sample using an ldap auth for the basic part.
This was causing problems since this identifier was assuming a certain
	userid string and not forgiving when parsing it.

Author: Andreas Richter

src/s2repoze/plugins/sp.py

@@ -597,7 +597,11 @@ def add_metadata(self, environ, identity):
         """ Add information to the knowledge I have about the user """
         name_id = identity['repoze.who.userid']
         if isinstance(name_id, basestring):
-            name_id = decode(name_id)
+            try:
+                # Make sure that userids authenticated by another plugin don't cause problems here.
+                name_id = decode(name_id)
+            except:
+                pass
 
         _cli = self.saml_client
         logger.debug("[add_metadata] for %s" % name_id)
@@ -651,7 +655,7 @@ def authenticate(self, environ, identity=None):
             tktuser = identity.get('repoze.who.plugins.auth_tkt.userid', None)
             if tktuser and self.saml_client.is_logged_in(decode(tktuser)):
                 return tktuser
-            return identity.get('login', None)
+            return None
         else:
             return None
 

src/saml2/ident.py

@@ -39,8 +39,12 @@ def code(item):
 def decode(txt):
     _nid = NameID()
     for part in txt.split(","):
-        i, val = part.split("=")
-        setattr(_nid, ATTR[int(i)], unquote(val))
+        if part.find("=") != -1:
+            i, val = part.split("=")
+            try:
+                setattr(_nid, ATTR[int(i)], unquote(val))
+            except:
+                pass
     return _nid