I am attempting to use mod_shib on an Apache 2.2 server.<br><br>As I read through various Shibboleth wikis and tutorials, I notice that there seem to be two styles of commands which do the same thing.<br><br>In this example, I want to require a Shibboleth session before access to an Apache location.<br>
<br>Documentation on <a href="http://wiki.shibboleth.net">wiki.shibboleth.net</a> [1] seems to use directives like "ShibRequestSetting requireSession 1".<br class="Apple-interchange-newline"><br>But at other sites [2], I see examples which use directives like 'ShibRequireSession On'<br>
<br>Which is correct? Can I assume that 'ShibRequestSetting setting value' is the preferred method? If so, what is the purpose of the 'ShibRequireSession On' method? I can't find this documented anywhere.<br>
<br>[1]: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-EnablingtheModuleforAuthentication">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#NativeSPApacheConfig-EnablingtheModuleforAuthentication</a><br>
[2]: <a href="https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.4/sp/deployment/debian-source.html">https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.4/sp/deployment/debian-source.html</a><br><br>Thank you,<br><br>-= Stefan<br>
<br>-- <br>Stefan Lasiewski Email: <a href="mailto:stefanl@nersc.gov" target="_blank">stefanl@nersc.gov</a><br>
Computer System Engineer III Email: <a href="mailto:slasiewski@lbl.gov" target="_blank">slasiewski@lbl.gov</a><br>Networking, Security, and Servers Group<br><br>National Energy Research Scientific Computing Center<br>
Lawrence Berkeley National Laboratory<br><br><br><br><br>