error document & public directory

Václav Mach machv at cesnet.cz
Tue Sep 18 05:47:55 EDT 2018


On 9/17/18 3:27 PM, Peter Schober wrote:
> Neither this nor the originally posted version makes much sense to me.
> If you'd need the RequireAll wrapper at all I'd move the AuthType
> within it, next to Require.
> Also you'd only use "Require shibboleth" if you wanted to make sure
> the module is active for a given resource, but does *not* enforce
> authentication or authorisation. But on the next line you require
> sessions and below you even require a specific attribute value. So why
> "Require shibboleth" there?
> 
This is an example config from 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig

>> <Location "/unauthorized.html">
>>      AuthType shibboleth
>>      Require shibboleth
>>      ShibRequestSetting requireSession 0
>> </Location>
> 
> In my own config I used "Require all granted" for such cases, and had
> such sections before ones with protection enabled, but YMMV.
That works fine, thanks for suggestion.

cheers,
Vaclav
-- 
Václav Mach
tel: +420 234 680 206
CESNET, z.s.p.o.
www.cesnet.cz

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3710 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20180918/c1fcf66a/attachment.p7s>


More information about the users mailing list