<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Le 26/01/2018 à 18:44, Peter Schober a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:20180126174449.vdptdm3w6tjs4jr3@aco.net">
<pre wrap="">* Jehan Procaccia <a class="moz-txt-link-rfc2396E" href="mailto:jehan.procaccia@tem-tsp.eu"><jehan.procaccia@tem-tsp.eu></a> [2018-01-26 16:10]:
</pre>
<blockquote type="cite">
<pre wrap="">On my old server with shib SP 2.4.3 and apache 2.2.16-6
[...]
Now on my new server with shibboleth 2.5.3 and apache 2.4.18
</pre>
</blockquote>
<pre wrap="">
Now why would you build a /new/ server with an /obsolete/ Shib SP to
begin with? (And with no way forward, probably?)</pre>
</blockquote>
the default install
"apt install libapache2-mod-shib2"
<br>
installed that version on
my <br>
# cat /etc/issue
<br>
Ubuntu 16.04.3 LTS \n \l
<br>
meanwhile I've been told to have a look at <br>
<pre wrap=""><a class="moz-txt-link-freetext" href="https://tuakiri.ac.nz/confluence/display/Tuakiri/Install+Shibboleth+SP+on+Debian+Based+linux#InstallShibbolethSPonDebianBasedlinux-Installation">https://tuakiri.ac.nz/confluence/display/Tuakiri/Install+Shibboleth+SP+on+Debian+Based+linux#InstallShibbolethSPonDebianBasedlinux-Installation</a>
</pre>
with pkg.switch.ch packages , I will .<br>
<blockquote type="cite"
cite="mid:20180126174449.vdptdm3w6tjs4jr3@aco.net">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">but my perl script that returns shib vars , keeps showing REMOTE_USER empty,
</pre>
</blockquote>
<pre wrap="">
JFYI, there's no need for such scripts, and there hasn't been one in
many years. You'll see REMOTE_USER in httpd's access log (lines that
do not have " - - " will have the REMOTE_USER in there), you'll see
successfully processed attributes in the SP's transaction.log and at
the /Shibboleth.sso/Session handler, and skipped (e.g. unmapped)
attributes in the SP's shibd.log.
</pre>
</blockquote>
you are right <br>
/Shibboleth.sso/Session does show me <br>
<pre><u>Attributes</u>
<strong>displayName</strong>: 1 value(s)
<strong>entitlement</strong>: 7 value(s)
<strong>eppn</strong>: 1 value(s)
and apache logs
137.129.12.21 - <a class="moz-txt-link-abbreviated" href="mailto:procacci@int.fr">procacci@int.fr</a> [26/Jan/2018:19:17:32 +0100]
</pre>
<blockquote type="cite"
cite="mid:20180126174449.vdptdm3w6tjs4jr3@aco.net">
<pre wrap="">
The rest I can't explain either, obviously. Though statements like the
following:
* Jehan Procaccia <a class="moz-txt-link-rfc2396E" href="mailto:jehan.procaccia@tem-tsp.eu"><jehan.procaccia@tem-tsp.eu></a> [2018-01-26 18:14]:
</pre>
<blockquote type="cite">
<pre wrap="">I want users accessing my location /shibwayf/shibtest.pl to be required to
login in order to get a REMOTE_USER = eppn
it works fine on my old server with
<Location /shibwayf>
AuthType shibboleth
ShibRequestSetting requireSession 0
require shibboleth
</Location>
</pre>
</blockquote>
<pre wrap="">
simply mean you'll have to have more/other configuration active
elsewhere, as no version of the SP would require sessions with that
configuration alone.</pre>
</blockquote>
I want to have "lazzy session" , allowing a login page with both a
link to a shibboleth connexion and still have the possibility to
connect with the local auth scheme provided by the web app . <br>
<br>
thanks .<br>
<blockquote type="cite"
cite="mid:20180126174449.vdptdm3w6tjs4jr3@aco.net">
<pre wrap="">
-peter
</pre>
</blockquote>
<p><br>
</p>
</body>
</html>