unrestricted access for specific domain

[Cantor, Scott]

On 11/2/18, 1:13 PM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

> In case you're referring to
> https://github.com/nginx-shib/nginx-http-shibboleth#configuration
> it seems there are multiple methods, one of which can be used with
> environment variables (while others would rely on request headers) but
> all of then seem to use subrequests.

I don't know why I thought it was specifically headers, it doesn't look like what I was reading two weeks ago but I don't think it's changed, so I must have misunderstood something.

I didn't really follow the exchange with the nginx guy that well, other than to get a bad vibe from the approach from his perspective.

Anyway, this essentially "wraps" the original FastCGI executable from our build and then adapts it into making the right thing happen within nginx, vs. allowing nginx itself to directly use the SP. It didn't appear that I could do a better job than he did by adding anything to the SP itself.

-- Scott