Apache mod_shib: 'ShibRequestSetting requireSession 1' vs 'ShibRequireSession On'?

[Stefan Lasiewski]

I am attempting to use mod_shib on an Apache 2.2 server.

As I read through various Shibboleth wikis and tutorials, I notice that
there seem to be two styles of commands which do the same thing.

In this example, I want to require a Shibboleth session before access to an
Apache location.

Documentation on wiki.shibboleth.net [1] seems to use directives like
"ShibRequestSetting requireSession 1".

But at other sites [2], I see examples which use directives like
'ShibRequireSession On'

Which is correct? Can I assume that 'ShibRequestSetting setting value' is
the preferred method? If so, what is the purpose of the 'ShibRequireSession
On' method? I can't find this documented anywhere.

[1]:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-EnablingtheModuleforAuthentication
[2]:
https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.4/sp/deployment/debian-source.html

Thank you,

-= Stefan

-- 
Stefan Lasiewski                         Email: stefanl at nersc.gov
Computer System Engineer III    Email: slasiewski at lbl.gov
Networking, Security, and Servers Group

National Energy Research Scientific Computing Center
Lawrence Berkeley National Laboratory
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120203/66dc880a/attachment.html