[shib_auth] FW: No errors but no authentication

Kristof Bajnok bajnokk at niif.hu
Thu Jun 2 07:10:59 CEST 2011


On 2011. June 1. 22:39:31 Tommy Peterson wrote:
> So I guess I am confused why I can’t have more than one <Location>
> directive in Apache for this module to work with. Or can I? Am I missing
> another piece of the configuration?

Shibboleth must be enabled for your whole Drupal site. However note that 
enabling Shibboleth does not necessarily imply that Shibboleth is actually 
_authenticating_. This is determined by "ShibRequireSession".

Example Apache config:

<Location /drupal>
  # Users here will see the login link
  # If they click to it, they will be authenticated
  AuthType Shibboleth
  require shibboleth
  ShibRequireSession off
</Location>

<Location /drupal/protected>
  # Unauthenticated users accessing this part will be redirected 
  # to IdP/Discovery Service without clicking on any loginlink
  # Authenticated users will not see the login link
  AuthType Shibboleth (probably not necessary, haven't checked)
  ShibRequireSession on
</Location>

Kristof



More information about the shib_auth mailing list