Shibb + WebDAV

[Jose Lopez Lujan]

Thanks Scott,

What do you think about this

<Location /bbcswebdav>
	DAV On
	AuthType shibboleth
	Require valid-user
	ShibRequestSetting requireSession 1

	ShibRequestSetting entityID https://idp.domain.edu/shibboleth
	#       ShibRequireSessionWith WebDAVLogin
</Location>



Thanks,
-
Jose Manuel Lopez Lujan
Senior LMS  Coordinator
University of Toronto
(416) 946-5107




On 12-02-08 12:52 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>> Here is the configuration set in the apache config file:
>> 
>> <Location /bbcswebdav>
>>         Options +Indexes +MultiViews
>>         DAV On
>>         AuthType shibboleth
>>         ShibRequireSession On
>>         require valid-user
>>         ShibRequireSessionWith WebDAVLogin
>> </Location>
>
>I wouldn't be shocked if using both ShibRequire commands together blew up
>or caused one to be ignored. Neither should be used in any new config
>anyway, ShibRequireSession is deprecated in favor of ShibRequestSetting.
>
>Not 100% sure ShibRequireSessionWith is even a command, but if Apache
>doesn't choke on it, it must have been.
>
>I think that whole approach is rather overkill. You should be able to
>override the acsIndex with a ShibRequestSetting acsIndex command for the
>content and stick with simple 2.4 configs with no special
>SessionInitiators.
>
>-- Scott
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net