[cpp-sp] 01/07: Install upstream's default Apache 2.4 configuration

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to annotated tag debian/2.6.1+dfsg1-2
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=2769cd5dfa5b15d6f0e46ddb461046a3db65eb2f

commit 2769cd5dfa5b15d6f0e46ddb461046a3db65eb2f
Author: Etienne Dysli Metref <etienne.dysli-metref at switch.ch>
AuthorDate: Tue Nov 14 16:35:00 2017 +0100

    Install upstream's default Apache 2.4 configuration
    
    Install upstream's default Apache 2.4 configuration in addition to the
    module-loading directive. Notably, this configuration enables
    unrestricted access to the handler at `/Shibboleth.sso`.
    
    Closes: #881724
---
 debian/libapache2-mod-shib2.apache2 |  1 +
 debian/shib2.conf                   | 25 +++++++++++++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/debian/libapache2-mod-shib2.apache2 b/debian/libapache2-mod-shib2.apache2
index 923dd0c..3ccf1cd 100644
--- a/debian/libapache2-mod-shib2.apache2
+++ b/debian/libapache2-mod-shib2.apache2
@@ -1 +1,2 @@
 mod debian/shib2.load
+mod debian/shib2.conf
diff --git a/debian/shib2.conf b/debian/shib2.conf
new file mode 100644
index 0000000..250123b
--- /dev/null
+++ b/debian/shib2.conf
@@ -0,0 +1,25 @@
+#
+# Turn this on to support "require valid-user" rules from other
+# mod_authn_* modules, and use "require shib-session" for anonymous
+# session-based authorization in mod_shib.
+#
+ShibCompatValidUser Off
+
+#
+# Ensures handler will be accessible.
+#
+<Location /Shibboleth.sso>
+  AuthType None
+  Require all granted
+</Location>
+
+#
+# Used for example style sheet in error templates.
+#
+<IfModule mod_alias.c>
+  <Location /shibboleth-sp>
+    AuthType None
+    Require all granted
+  </Location>
+  Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
+</IfModule>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.