lazy sessions and .htaccess

[Bill Tantzen]

Thanks for the quick reply Nate!

I guess what I am wondering is if my approach is the best way, or at least
the standard way (or simply the way everybody does it).  I looked over the
docs again, in particular the page you cited and I don't see anything
helpful, although I may be a little slow...

Specifically, what I am trying to accomplish is to be able to quickly add
"require not ip xx.xx.xx" directives to an .htaccess file for a handful of
locations.  It would seem that apache consults <Location> blocks after
.htaccess, which is why I opted to configure my lazy sessions in a
<Directory> block instead.  If that works, and it's not too weird, I'm
happy with it but you seem to hint that there is more than one way to do
it.  Can you suggest another way?

I am also curious about what lazy sessions actually do; my application
seems to work fine without them!  What is the upside to using them when
they seem to do nothing!

Thanks again for taking the time to help out!
~~ Bill

On Tue, Dec 17, 2019 at 3:32 PM Nate Klingenstein <ndk at signet.id> wrote:

> Bill,
>
>
>
> It's one way to do it.  For the gory details:
>
>
>
> https://wiki.shibboleth.net/confluence/display/SP3/Apache
>
>
>
> Take care,
>
> Nate.
>
>
>
> --------
>
>
>
> The Art of Access *®*
>
>
>
> *Nate Klingenstein* | Principal
>
> https://www.signet.id/
>
>
>
> -----Original message-----
> *From:* Bill Tantzen
> *Sent:* Tuesday, December 17 2019, 1:49 pm
> *To:* users at shibboleth.net
> *Subject:* lazy sessions and .htaccess
>
> I am using lazy sessions for my site, and as such have a section like this:
>
> <Location />
>   AuthType shibboleth
>   ShibRequireSession Off
>   Require shibboleth
> </Location>
>
> This works as expected, but I would like to further configure a
> subdirectory with a .htaccess file (which, as the documentation states,
> impossible in combination with the above <Location> block.
>
> My workaround was to place the directives in a <Directory> block,
> configuring the webroot.
>
> This *does* work, but I'm wondering if it is the best way to accomplish
> what I want (to use .htaccess files).
>
> I have httpd 2.4.6 and shibd 2.6.1
>
> Any pointers here would be appreciated!
> Regards,
> Bill
>
> --
> Human wheels spin round and round
> While the clock keeps the pace... -- John Mellencamp
> ________________________________________________________________
> Bill Tantzen    University of Minnesota Libraries
> 612-626-9949 (U of M)    612-325-1777 (cell)
>
> --
>
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
>
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Human wheels spin round and round
While the clock keeps the pace... -- John Mellencamp
________________________________________________________________
Bill Tantzen    University of Minnesota Libraries
612-626-9949 (U of M)    612-325-1777 (cell)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191218/4df03a77/attachment.html>