Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move global shib settings out of the require block #660

Merged
merged 1 commit into from
Feb 16, 2024

Conversation

skorner
Copy link
Member

@skorner skorner commented Feb 15, 2024

The first pass at restoring "badrobots" functionality inadvertently had the global settings to enable shib passively for the Fuclrum vhost within the config for a require block. This resulted in these settings being ignored and not applied. The changes in this PR address that issue.

@umjnega
Copy link
Contributor

umjnega commented Feb 15, 2024

I assume the order doesn't matter... Everything looks to be working on the staging servers. In the manual prod config, authtype and shitrequestsetting were before the REquireALL?

<Location "/">

Require not env badrobot
Require not env loadbalancer
Require shibboleth

AuthType shibboleth
ShibRequestSetting requireSession 0

@skorner
Copy link
Member Author

skorner commented Feb 15, 2024

That's correct that whether those two lines are before or after the RequireAll block doesn't affect the outcome.

@umjnega umjnega merged commit 936b38c into master Feb 16, 2024
1 check passed
@skorner skorner deleted the fulcrum-badrobots-shib-take2 branch February 26, 2024 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants