Shibboleth login
Tonu Mikk <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <CABDFm8hLpQOSDD1MTNnyctQ6JBgYYEH3Cx-2fSsmwBNBCeqmmQ@mail.gmail.com> |
Hello,
I was previously able to set up Shibboleth login to a Roundup tracker using
mod_python <http://www.roundup-tracker.org/cgi-bin/moin.cgi/ShibbolethLogin>.
I am now trying to set up Shibboleth login using the Apache and the
ProxyPass method.
I am not able to get the users automatically logged in using the HTTP Basic
authentication as described in the config.ini . First I get presented with
the Shibboleth login and then I get presented with the Roundup interface
that requires another login.
I am quite sure I am able to set the REMOTE-USER value in the browser
environment variable, but I am not sure if this value is passed to the
Roundup's localhost web server instance. Any advice is appreciated!
Here is the Apache virtual host configuration:
<VirtualHost *:80>
ServerName oranges.drc.umn.edu
Redirect / https://oranges.drc.umn.edu/
</VirtualHost>
<VirtualHost *:443>
ServerName oranges.drc.umn.edu
# DocumentRoot /var/www/html/oranges
# <Directory /var/www/html/oranges>
# Require all granted
# DirectoryIndex index.html
# </Directory>
<Location />
AuthType shibboleth
ShibRequestSetting requireSession 1
Require valid-user
RequestHeader set REMOTE-USER %{REMOTE_USER}s
</Location>
ProxyPass /Shibboleth.sso !
ProxyPass / http://localhost:8080/oranges/
# <IfModule mod_proxy.c>
# ProxyPass / http://localhost:8080/oranges/
# </IfModule>
SSLEngine on
SSLCACertificateFile /swadm/certs/oranges_interm.cer
SSLCertificateFile /swadm/certs/oranges_cert.cer
SSLCertificateKeyFile /swadm/certs/oranges_private.key
</VirtualHost>
--
Tonu Mikk
Adaptive Technologist | Disability Resource Center |
diversity.umn.edu/disability
University of Minnesota | umn.edu
[email protected] | 612-625-3307
_______________________________________________
Roundup-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/roundup-users