Shibboleth + Basic Auth in earlier versions of Apache (specifically 2.2)

[Cantor, Scott]

On 10/15/15, 5:23 PM, "users on behalf of Pottinger, Hardy J." <users-bounces at shibboleth.net on behalf of PottingerHJ at missouri.edu> wrote:
>
>Thanks, Scott. Can you help point me in the right direction here?

You're not turning mod_shib off. If you want to minimize the possibility of conflict, use the ShibDisable command so it's not doing any work for those requests.

Make sure ShibCompatWith24 is on and that there is no reliance on valid-user or user rules anywhere that mod_shib is used. That's covered in the wiki as the standard practice for running on old Apache versions.

But I'm not sure any of that is relevant.

> In a nutshell, I'm trying to support both Shibboleth and Basic Auth on the same vhost, most of the site is protected by Shibboleth, a few pages are exempt from this (via Satisfy Any) and that's working. However, when I attempt to protect one page with Basic Auth (it's an xmlrpc link, and thus Shibboleth isn't suitable, it needs to be Basic Auth). When I visit this page, I see a 401 Error, and the Apache error log indicates:
>
>[error] [client 555.555.55.55 ] access to /project/login/rpc failed, reason: verification of user id '<null>' not configured

That message comes from a dummy module in Apache that runs any time nothing else is handling the AuthType. So that tells me that mod_shib probably isn't your issue, mod_auth_basic is. It's not running, or you couldn't get that log message. That isn't due to any knowledge of Shibboleth, I grepped the Apache source code.

-- Scott