requireSession and Limit with Apache 2.2.x

Scott Koranda skoranda at
Tue Jan 17 18:53:14 GMT 2012


Using this configuration

<Directory /path/to/some/cgi/scripts>
    AuthType shibboleth
    Require shibboleth
    <Limit POST>
        AuthType shibboleth
        ShibRequestSetting requireSession 1
        Require valid-user

I would have expected that any POST to my CGI script would
have immediately triggered a session initiation, but that a
GET to the same script would only have triggered the
initiation of the module and hence the ability to support a
lazy session approach.

I find, however, that a GET immediately triggers session

What am I doing wrong?

I am using Apache 2.2.16 and Shibboleth SP 2.4.3.


Scott K

More information about the users mailing list