Unsecuring Child URI

[Peter Schober]

* ronharris <neo204011 at gmail.com> [2019-06-05 19:30]:
> Thank you very much Jason and Peter for your advice.
> 
> Unfortunately I wasn't able to try it as Shibboleth SP3 is configured with
> Apache 2.2.
> And "Require all granted" is not supported in it.

"Require all granted" is the httpd 2.4 syntax, but httpd 2.2 can do
the same thing just using different syntax. Again, the httpd
documentation would cover that.

Maybe try something like

  Allow from all
  Satisfy any

within the Location(Match) directive you want excluded from auth.

-peter