Shibboleth SP - RequestMap requireSession false for query string value

[Ulrich Leodolter]

Hi,

On Thu, 2014-02-06 at 19:48 +0000, Miller, Don (donm at uidaho.edu) wrote:
> Is it possible to not require the session at all? Possibly like this, similar to excluding a sub path from a session?
> 
> <RequestMap applicationId="default">
>     <Host name="www.example.org">
>         <Path name="doku.php" authType="shibboleth" requireSession="true">
>             <Query name="id" regex="^public.*" requireSession="false"/>
>         </Path>
>     </Host>
> </RequestMap>

I tried the following:

<RequestMap applicationId="default">
  <Host name="www.example.org">
    <Path name="shib" authType="shibboleth" requireSession="true">
       <Path name="TST" applicationId="TST" requireSessionWith="testidp">
          <Path name="logout" authType="shibboleth" requireSession="false"/>
       </Path>
    </Path>
  </Host>
</RequestMap>

Additionally i configured Apache as documented at
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-EnablingtheModuleforAuthentication

<Location /shib>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  require valid-user
  Options ExecCGI FollowSymlinks
  ForceType application/x-httpd-cgi
</Location>
<Location "/shib/TST/logout">
  AuthType shibboleth
  ShibRequestSetting requireSession false
  require shibboleth
</Location>


But until now it does not work as i would expect,  accessing
https://www.example.org/shib/TST/logout without shib session always
redirects to testidp login.

Best regards
Ulrich