Lazy Session with Lighttpd

[Guy Tadi]

Thanks for the reply. Setting requireSession to false in RequestMap doesn't
change the behavior. The shibauthorizer still redirects sessions to IdP and
I see Shib attributes once the session is established. Note that I'm using
Lighttpd which doesn't have a native Shib module so I'm using the
shibresponder/shibauthorizer fastcgi.

My requestmap and lighttpd configs look like this (my php protected content
is under /secure path). Is there anything else to check?

RequestMapper type="Native">
  <RequestMap>
      <Host name="sp.example.org">
          <Path name="secure" authType="shibboleth" requireSession="false"/>
      </Host>
   </RequestMap>
</RequestMapper>


fastcgi.server  = (
      "/Shibboleth.sso" => (("socket" => "/tmp/fcgi-resp.sock", "bin-path"
=> "/servers/sapo-sp/lib/shibboleth/shibresponder", "check-local" =>
"disable", "mode" => "responder")),
      "/secure"   => (("socket" => "/tmp/fcgi-auth.sock", "bin-path" =>
"/servers/sapo-sp/lib/shibboleth/shibauthorizer", "check-local" =>
"disable", "mode" => "authorizer")),
      ".php" => (( "socket" => "/tmp/fgci-php.sock",
"broken-scriptfilename" => "enable", "mode" => "responder"))
)

On Wed, Feb 11, 2015 at 9:39 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 2/11/15, 1:10 PM, "Guy Tadi" <tadiguy812 at gmail.com> wrote:
>
>
>
> >I'm trying to do lazy session with Lighttpd and let my application manage
> >the session (I already have non-lazy session working with
> >shibauthorizer/shibresponder).
>
> There's no difference, just change the RequestMap settings so that
> requireSession is false.
>
> >If my application redirects session to
> >
> https://sp.example.com/Shibboleth.sso/Login?target=https://sp.example.com/
> >App
> ><
> https://sp.example.com/Shibboleth.soo/Login?target=https://sp.example.com
> >/App> how
> > can my application get access to the attributes after Shib has processed
> >the AuthN response?
>
> The same way it would otherwise.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150211/b893e49d/attachment.html