apache 2.4 + shibboleth 2.5.5

[Cantor, Scott]

> We noticed that if we enter the following lines in
> /etc/apache2/conf.d/shib.conf it will invoke the shibboleth login screen
> when we try the root of the server (https://server-name.ucla.edu
> 
> <Location />
> AuthType shibboleth
> Require shibboleth
> </Location>

That is *not* possible, without other directives involved in Apache or the SP.

> <Location /protected-folder>

IIRC, you can't do that if you also do the other Location block, it will simply take precedence. I believe Location rules are merged together, and I don't think that is new with 2.4.

> It seems that there are quite some attributes changes from previous
> versions of the shibboleth.

No, there are Apache changes, and what you've posted simply isn't true by itself.

-- Scott