Shibboleth SP - PATH exclude in Request Mapper

Peter Schober peter.schober at univie.ac.at
Wed Oct 31 10:22:27 EDT 2012


* Cantor, Scott <cantor.2 at osu.edu> [2012-10-31 15:10]:
> On 10/31/12 9:55 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> 
> >* Cantor, Scott <cantor.2 at osu.edu> [2012-10-29 21:33]:
> >> BTW, I believe there is one thing the RequestMap can do that Apache
> >>can't,
> >> and that's "unset" AuthType.
> >
> >You can always use
> >
> >  Allow from all
> >  Satisfy any
> >
> >for the unprotected content to achive the same effect,
> 
> I just had occasion to try this on svn.shibboleth.net to open up access to
> /robots.txt, but nothing I tried worked. I tried that explicitly, but if I
> didn't try and override AuthType away from basic, it would still prompt
> me, and if I did, it would just refuse to let me in because the AuthType
> wasn't known.

Other than suggesting to add "Order Allow,Deny" before the other two I
don't know what to say. Always worked for me, IIRC.

A quick search brought up examples in the Apache wiki:
http://wiki.apache.org/httpd/BypassAuthenticationOrAuthorizationRequirements
-peter


More information about the users mailing list