Re: unrestricted access for specific domain

[Martin Demko]

"Cantor, Scott" <cantor.2 at osu.edu> wrote on Fri, 2 Nov 2018 13:36:03 +0000:
> On 11/2/18, 7:01 AM, "users on behalf of Martin Demko" <users-bounces at shibboleth.net on behalf of 325073 at mail.muni.cz> wrote:
> 
> > But I wasn't successful when looking for the way how to limit it only to
> > some domains.
> 
> Limit what? I don't really follow the question well enough to
> answer.

What I need is a location in our web server which would be accessible from
some named domain (or IP address) without being treated by IdP.

> 
> > I found the Shibboleth quite complicated and honestly don't
> > actually know what it is going behind, I use it only because I need to and
> > because I have found some guide on how to configure it.
> 
> If  that guide isn't the actual documentation, then perhaps you might start
> there, but to begin with, if this is Apache, you are going in the wrong
> direction. The docs on Apache use in the wiki cover the commands you can use
> to control access and the behavior of the SP for different parts of the web
> server, you don't need to use the RequestMap at all with it and there are
> usually reasons you shouldn't (e.g. it's unsafe if you don't set
> UseCanonicalName On in Apache).

Ok, maybe I should have started with the information that I use Nginx as a
proxy and the documentation for the cooperation of Nginx with Shibboleth is not
that wide and clear. I followed this guide: https://tcg.stanford.edu/?p=131

> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net