move shib require to top location block

add two shib lines remove whitespace
mlibrary · Feb 14, 2024 · d8f9ab5 · d8f9ab5
1 parent cdc1885
commit d8f9ab5
Showing 1 changed file with 5 additions and 9 deletions.
diff --git a/manifests/profile/www_lib/vhosts/fulcrum.pp b/manifests/profile/www_lib/vhosts/fulcrum.pp
@@ -19,11 +19,13 @@
   String $servername = 'www.fulcrum.org'
 ) {
   $authz_base_requires = {
-    enforce  => 'all',
-    requires => [
+    auth_type       => 'shibboleth',
+    custom_fragment => 'ShibRequestSetting requireSession 0',
+    enforce         => 'all',
+    requires        => [
       'not env badrobot',
       'not env loadbalancer',
-      'all granted'
+      'shibboleth'
     ]
   }
 
@@ -154,12 +156,6 @@
       XSendFile on
       XSendFilePath ${derivatives_path}
       XSendFilePath ${alt_derivatives_path}
-      # Configure Shibboleth for authentication via InCommon partner login
-      <Location "/">
-        AuthType shibboleth
-        ShibRequestSetting requireSession 0
-        Require shibboleth
-      </Location>
     | EOT
   }
 }