unrestricted access for specific domain

Cantor, Scott cantor.2 at osu.edu
Fri Nov 2 13:50:18 EDT 2018

On 11/2/18, 1:13 PM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

> In case you're referring to
> https://github.com/nginx-shib/nginx-http-shibboleth#configuration
> it seems there are multiple methods, one of which can be used with
> environment variables (while others would rely on request headers) but
> all of then seem to use subrequests.

I don't know why I thought it was specifically headers, it doesn't look like what I was reading two weeks ago but I don't think it's changed, so I must have misunderstood something.

I didn't really follow the exchange with the nginx guy that well, other than to get a bad vibe from the approach from his perspective.

Anyway, this essentially "wraps" the original FastCGI executable from our build and then adapts it into making the right thing happen within nginx, vs. allowing nginx itself to directly use the SP. It didn't appear that I could do a better job than he did by adding anything to the SP itself.

-- Scott

More information about the users mailing list