[shib_auth] creating new users

[Kristof Bajnok]

On 2011. May 25. 15:42:28 Tommy Peterson wrote:
> What about making an exception in Apache to the two Drupal URLs (for new
> account creation and password email reminders) in what Shibboleth locks
> down? Would that work in your mind? Just wondering before I go to the
> effort of trying it out.

I wouldn't do that, because I don't know Drupal request paths enough. If you 
do, go ahead. Examine the requests with LiveHTTPHeaders or something similar. 
If Drupal does not change its behaviour (what it can, it's not a public API 
AFAIK), you can record the paths to the list of the exceptions. You will get 
all the CSS, pictures, fancy blocks, etc.

IMHO it's a very slippery slope.

Kristof