<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Le 26/01/2018 à 16:45, Cantor, Scott a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:B57E0EFB-7D27-4155-9B04-996362F2C701@osu.edu">
<pre wrap="">I don't know anything about your intent, but you changed "don't require a login" (passive protection) to "require a login" (active protection), which is pretty different. Nothing you did, or would be likely to do, would impact the data showing up, particularly given it requiring a login. The changes are all around authorization rules.</pre>
</blockquote>
I want users accessing my location /shibwayf/shibtest.pl to be
required to login in order to get a REMOTE_USER = eppn <br>
it works fine on my old server with <br>
<Location /shibwayf><br>
AuthType shibboleth<br>
ShibRequestSetting requireSession 0<br>
require shibboleth<br>
</Location><br>
<br>
having on that location an index.html that contains a "connexion"
link to a shibboleth session (lazzy session I supose) with hard
coded IDP <br>
<br>
[1] <a class="moz-txt-link-freetext" href="https://mysite.int.fr/">https://mysite.int.fr/</a><b>Shibboleth.sso/Login</b>?providerId=<a class="moz-txt-link-freetext" href="https://idp3.tem-tsp.eu/idp/shibboleth&target=https://mysite.int.fr/shibwayf/shibtest.pl">https://idp3.tem-tsp.eu/idp/shibboleth&target=https://mysite.int.fr/shibwayf/shibtest.pl</a><br>
<br>
on the new server with apache 2.4 and more recent SP (2.5.3) <br>
<br>
<Location /shibwayf><br>
ShibRequireSession<b> On</b><br>
AuthType shibboleth<br>
require shib-session<br>
</Location><br>
<br>
with ShibRequireSession<b> On => </b>then I do have a redirect
to the DS and be able to login, then my connexion link [1] appears
and I am directly connected (session already done) , but still no
REMOTE_USER a eppn value on the perl Env display <br>
if I set here ShibRequireSession<b> Off ( </b>to reflect<b> </b>requireSession
0 on the old server config) , then I get a "Unauthorized" response :<br>
"GET /shibwayf/ HTTP/1.1" <b>401</b><br>
<br>
I admit it's confusing and I am lost , probably a miss configuration
somewhere, but I can't find where , apache Location ?
shibboleth2.xml ? <br>
defaults and directives changes may explain the difference between
my old config and the new one <br>
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig</a><br>
but I cannot find witch one ? <br>
<br>
thanks for your advices.<br>
<br>
</body>
</html>