Apache - Can not get mod_authnz_ldap to work with mod_shib_24

Peter Schober peter.schober at univie.ac.at
Fri Feb 20 05:33:19 EST 2015


* Mouchoir <terje.andersen+shibboleth at gmail.com> [2015-02-20 11:05]:
> In Apache, I have:
>  -  a "catch-all" <Location /> with shibboleth authentication enabled.
> -  a API at <LocationMatch /api/[0-9]*/> with LDAP authentication enabled.

Try "ShibDisable On" to your API Location, cf.
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-AuthConfigOptions
Also "ShibRequireSession Off" has long been replaced with
"ShibRequestSetting requireSession false", IIRC.
If all else fails you could exclude /api/ from the catch-all <Location />.
-peter


More information about the users mailing list