Shibboleth authentication for Redmine, Jenkins, Git, SVN

[Peter Schober]

* Etienne Dysli-Metref <etienne.dysli-metref at switch.ch> [2017-06-29 08:47]:
> On 28/06/17 18:54, Peter Schober wrote:
> > But I'm pretty sure you can also go the usual route of fronting the
> > Java servlet container with Apache httpd and mod_proxy_ajp plus the
> > Shibboleth SP and configure the application appropriately.
> 
> I went this way with Jenkins, using the "reverse proxy auth" plugin [1]
> to get the username from HTTP headers. I've had to exclude some URLs
> from authentication though, for stuff like Git commit notifications to
> work (the plugin documents these).
> 
> [1] wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin

Thanks. From this page
https://wiki.jenkins.io/display/JENKINS/Running+Jenkins+behind+Apache
it seems you can run Jenkins behing httpd using AJP just fine, which
would be preferrable (though the config examples provided there are
using mod_jk, which is needlessly complicated). The question then is
whether the "Reverse Proxy Auth Plugin" can be made to work with
request.getAttribute() and not only with request.getHheader().
-peter