<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-IE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi Shibbuleth Users,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am trying to get the shibboleth module to work with Drupal 7. I can get my site to protect static (just html files but user is redirected to WAFY and after authentication is allowed to access the protected subfolder) using my current shibboleth setup for the site but am finding it difficult to translate it to work with drupal and protect not just a particular folder but instead trigger when a user tries to access protected content or wants to login. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I want to use lazy sessions with local login as a backup option but am unsure of the correct configuration on the apache side I need to make sure shibboleth authentication is used and also that it will protect all I need it to.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Can I configure the root of my drupal site (also my web_root) as the location or do I need to exclude the public access parts of my site? <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My site’s apache config is as follows<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>#Configure the shibboleth module for this site<o:p></o:p></p><p class=MsoNormal>#Shibboleth Module loaded elsewhere<o:p></o:p></p><p class=MsoNormal>#If I set the ShibApplicationId outside the <location> apache won’t start property<o:p></o:p></p><p class=MsoNormal>ServerName site.example.org<o:p></o:p></p><p class=MsoNormal>UseCanonicalName On<o:p></o:p></p><p class=MsoNormal><Location /><o:p></o:p></p><p class=MsoNormal>ShibApplicationId “ShibXMLID”<o:p></o:p></p><p class=MsoNormal>AuthType shibboleth<o:p></o:p></p><p class=MsoNormal>ShibRequireSession “Off”<o:p></o:p></p><p class=MsoNormal>ShibExportAssertion “On”<o:p></o:p></p><p class=MsoNormal>Require shibboleth<o:p></o:p></p><p class=MsoNormal>ShibUseHeaders On<o:p></o:p></p><p class=MsoNormal></Location><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any help or advise you can give me is much appreciated<o:p></o:p></p></div></body></html>