<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Hello,</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div><br>
</div>
<div>We are trying to use shibboleth access rules for different web folders. We have installed SUSE Linux Enterprise Server 12 SP1 and we are running Apache 2.4 / Shibboleth 2.5.5.</div>
<div>We are trying to use shibboleth for access control for web folders on the web root. </div>
<div>
<div>We noticed that if we enter the following lines in /etc/apache2/conf.d/shib.conf it will invoke the shibboleth login screen when we try the root of the server (<a href="https://dev.sonnet.ucla.edu/" style="color: rgb(149, 79, 114);">https://server-name.ucla.edu</a> )</div>
<div><br>
</div>
<div>
<div><Location /></div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>AuthType shibboleth</div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>Require shibboleth</div>
<div></Location></div>
</div>
<div><br>
</div>
<div>But when we try to protect a web folder (no matter what we tried) it simply won’t invoke the shibboleth login screen</div>
<div><br>
</div>
<div>
<div><Location /protected-folder></div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>AuthType shibboleth</div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>ShibRequestSetting requireSession true</div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>Require valid-user (or shibb-user) // it seems that ‘valid-user’ is deprecated as of shibboleth 2.5.x</div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span>ShibUseHeaders On</div>
<div><span class="Apple-tab-span" style="white-space: pre;"></span># require shib-attr <ORG_ATTRIBUTE> userid@ucla.edu (this one also does not work)</div>
<div></Location></div>
</div>
<div><br>
</div>
<div>It seems that there are quite some attributes changes from previous versions of the shibboleth.</div>
</div>
<div>Does anyone had setup shibboleth with this configuration?</div>
<div><br>
</div>
<div>
<div id="">
<div>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 10.5pt; font-family: Calibri, sans-serif;">Thanks, nir<o:p></o:p></span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 10.5pt; font-family: Calibri, sans-serif;"> </span></p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<br>
</p>
<p class="MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 9pt; font-family: 'Courier New';"></span></p>
</div>
<div><br>
</div>
</div>
</div>
</div>
</span>
</body>
</html>