Externalized XML Access Control Rules with Apache 2.4

[Cantor, Scott]

On 5/22/15, 7:39 AM, "Thomas Baerecke" <thomas.baerecke at switch.ch> wrote:

>Hello,
>
>we found a solution. The following config works with Apache 2.4:
>
><Location />
>   AuthType shibboleth
>   ShibRequestSetting requireSession true
>   Require shib-plugin /etc/httpd/access_control_rules.xml
></Location>
>
>It seems that "ShibAccessControl" has been replaced by "Require 
>shib-plugin".

As documented:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig

My recollection is that I broke compatibility there because the changed authorization model in 2.4 was so radically different that it was impossible to support the separate command.

-- Scott