Making a public folder on a Shib protected website

[Cantor, Scott]

On 6/18/13 3:07 PM, "Gaddie, Herbert (Luke)" <gaddie.3 at osu.edu> wrote:
>
>And would like to open a particular folder so that anyone can access it,
>or at the very least be able to protect it using only AuthType Basic:

Those are slightly different goals because of issues with the software,
depending on Apache version.

>Unfortunately, I've been unable to find a good way to do this. I've
>attempted to use:
>Satisfy Any
>Allow from All
>AllowOverride All

There's an exclusion example in the wiki on the NativeSPApacheConfig page.
To just open up access, set

ShibRequestSetting requireSession false

With your user rule up above, you'd have to override that also, and put
require shibboleth in the subfolder.

You can also use ShibDisable On to completely shut off the module for some
content, and the rest of the settings are ignored.

For Basic-Auth, I would expect setting AuthType to basic in the subfolder
would also work, provided an appropriate require rule is used, but that
can be trickier.

-- Scott