ShibAccessControl Relative Paths

[Aaron Roots]

Cheers Scott

Unfortunately for me - I don't think I could sell going relatively from /etc/shibboleth to ../../var/www/html/vhost/etc/etc as a better option to the end users. :)
I also don't believe that it would be a good idea to open up the /etc/shibboleth location to the end users to write to either - just for access control to their webcontent

You will have to excuse my Apache module ignorance here - I may not be reading these right - but I hope this is the sort of info you would be looking for:
"A cmd_parms structure is the first argument passed to all directive handlers"
"char* path"
"If the handler is being called to process a directive located in an access control file, 'path' will contain the path to the directory containing the .htaccess file"

>From pages 581-582 of
http://books.google.com.au/books?id=5jAuQBe2EsMC&pg=PA448&lpg=PA448&dq=writing+apache+module+current+directory&source=bl&ots=6ZFjq9Np0j&sig=COI3gcZbCJi6jkBONnvesdyCCyM&hl=en&sa=X&ei=iCNDT5qpFtCViAef17jvBA&ved=0CEYQ6AEwBA#v=onepage&q=htaccess&f=false

Cheers
Aaron


________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Tuesday, 21 February 2012 3:20 PM
To: users at shibboleth.net
Subject: Re: ShibAccessControl Relative Paths

On 2/20/12 10:09 PM, "Aaron Roots" <aaron.roots at deakin.edu.au> wrote:
>
>We have started using the ShibAccessControl in our .htaccess files ­
>finding it most appropriate for our circumstances. From testing it
>appears that relative paths do not work with it. Just wanting to confirm
>that it definitely requires an absolute path
> and I am not missing something entirely.

Relative paths should work fine, but they're relative to the standard
configuration location, etc/shibboleth.

>Then asking the next few questions I'd have. Am also wondering if there
>any reason this couldn't use a relative path? Would it be appropriate to
>log this as a "Improvement"?

I can't really change the relative path base, it would break existing
configurations. I suppose additional commands could be worked in to
override that. That all assumes that Apache even gives me the information
needed to establish a path. I don't know how to do that, so a pointer or
patch would need to be supplied by somebody.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net