<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 4/17/17 1:37 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote cite="mid:31788E84-E8A1-483C-86B3-9EB532F7F26C@osu.edu"
type="cite"><br>
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">I have tried a directive “LocationMatch” and a “require” and shib-attr with the matched string but it does not seem to work.
</pre>
</blockquote>
</blockquote>
<br>
To be clear, are you trying to use a something like a named match
group expression in the require rule, similar to this?:<br>
<br>
<br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<tt><LocationMatch "^/(?<orgunit>[^/]+)/foo/bar"></tt><tt><br>
</tt><tt> require shib-attr orgunit %{env:MATCH_ORGUNIT}</tt><tt><br>
</tt><tt></LocationMatch></tt><tt><br>
</tt><tt><br>
</tt><br>
FYI, according to the Apache docs [1], that only works in 2.4.8+. <br>
<br>
<br>
<blockquote cite="mid:31788E84-E8A1-483C-86B3-9EB532F7F26C@osu.edu"
type="cite">
<pre wrap="">
Well, that does work, so your problem is with Apache configuration or the data you're actually getting.
</pre>
</blockquote>
<br>
I may be reading too much into the OP's question, but do we know for
a fact that a "dynamic runtime" require rule like the above works?
For example, does mod_shib need to invoke any special httpd
machinery in order for the expression eval to happen properly?<br>
<br>
<br>
<br>
[1] <a class="moz-txt-link-freetext" href="http://httpd.apache.org/docs/2.4/mod/core.html#locationmatch">http://httpd.apache.org/docs/2.4/mod/core.html#locationmatch</a><br>
</body>
</html>