Nginx note

[davidjb]

Cantor, Scott E. wrote
> I don't recall this coming across the Shibboleth lists, but maybe I just
> missed it.
> 
> http://davidjb.com/blog/2013/04/integrating-nginx-and-a-shibboleth-sp-with-
> fastcgi/
> 
> At a glance it's a bit hairy in that a custom Nginx is needed, but the SP
> part is out of the box.

In hindsight, I probably have announced it somewhere more obvious -- that's
my blog post.  Thanks for finding it.

The customisations to Nginx specifically related to Shibboleth SP support
are only centric around minor changes to the authorizer subrequest module,
and ensuring this is and the header manipulation module are added into the
Nginx build.  Nginx 1.5+ now has the authorizer subrequest module in the
core by default (though not part of a standard build, mind you), so that
makes maintenance slightly easier in that only a patch is required to the
core.  I'm yet to look into how this changes things and won't until Nginx
1.5 becomes the stable version or I desperately need a feature or fix.

Any other customisations in my Nginx build are entirely unrelated (but
included because they're useful or necessary in my work).

If anyone's interested in collaborating further on this effort, feel free to
get in touch -- I appreciate any and all assistance, even if it's just
testing what I've done or helping document things.  If there's sufficient
interest, then a dedicated project page might be in order.

The other thing I was curious about was whether FastCGI support could be
built with the SP by default, or else a specific build made on each new
release.  At present, I'm needing to keep up with new SP versions and whilst
my package rebuilding is all scripted now, avoiding this step would help.




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Nginx-note-tp7588765p7590092.html
Sent from the Shibboleth - Developers mailing list archive at Nabble.com.