Moodle with Shibboleth auth - can i protect content without accessing auth/shibboleth/index.php?

[voyage_34]

Hello to all! I'm getting straight to the point. This is the case:

I have set up and configured *Joomla at shib-sp1.com* working successfully
with shibboleth authentication. I have also set up and configured *Moodle at
shib-sp2.com* working successfully with shibboleth authentication.
For Joomla i used joomla-shibboleth-server-authentication plugin and for
Moodle i used the integrated shibboleth authentication plugin.

Moodle internal shibboleth auth plugin protects /auth/shibboleth/index.php/
, so I have to access this web page to get shibboleth authenticated. What I
wish to do though is slightly different. I want to use Joomla as a gateway
to the whole system, get authenticated when I access shib-sp1.com and then
be able to access automatically a course, following an internal link to that
moodle course (eg. shib-sp2.com/course/view.php?id=24) as the same
registered user that got authenticated just before.

However, when i authenticate (successfully - user xyz) from Joomla and
follow the link mentioned above to a moodle course, moodle does not
recognize me as user xyz because I have not accessed the protected URL
shib-sp2.com/auth/shibboleth/index.php. I tried to protect
shib-sp2.com/course at apache configuration using:

        <Location /course>
                AuthType Shibboleth
                ShibRequestSetting requireSession 1
                require primary-affiliation xyz_user
        </Location>
 
but it won't work (still moodle shows me as guest user). I still have to
access auth/shibboleth/index.php so that moodle realizes I am user xyz. 

Is there a way I can achieve this without accessing
auth/shibboleth/index.php OR maybe can moodle redirect me to
auth/shibboleth/index.php when i follow the link to course/view.php?id=24
and then throw me back to the course?

I hope I am clear, but in case I am not, you are welcome to ask for further
details.

Using: Debian Wheezy, shibboleth IDP 2.2.1, shibboleth SP 2.5, Apache/2.2.16
(Debian)




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Moodle-with-Shibboleth-auth-can-i-protect-content-without-accessing-auth-shibboleth-index-php-tp7593650.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.