Bug#881724: libapache2-mod-shib2: Install recommended Apache configuration
Etienne Dysli-Metref
etienne.dysli-metref at switch.ch
Tue Nov 14 14:37:19 UTC 2017
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package: libapache2-mod-shib2
Version: 2.6.0+dfsg1-5
Severity: wishlist
Dear maintainers,
Upstream provides and installs an Apache httpd configuration file with
some directives recommended for a correct operation of the Shibboleth
SP. While these directives are mentioned in
`/usr/share/doc/libapache2-mod-shib2/README.Debian.gz`, it would be
nicer to provide them in a form that can easily be enabled, e.g. under
`/etc/apache2/conf-available/` with the following content:
ShibCompatValidUser Off
<Location "/Shibboleth.sso">
AuthType None
Require all granted
</Location>
<IfModule mod_alias.c>
<Location /shibboleth-sp>
AuthType None
Require all granted
</Location>
Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
</IfModule>
I can provide a patch for this. What do you think? Should this
configuration be enabled upon installation as well?
Cheers,
Etienne
- -- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 4.4.0-98-generic (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C
(charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect
Versions of packages libapache2-mod-shib2 depends on:
ii apache2-bin [apache2-api-20120211] 2.4.29-1
ii libc6 2.24-17
ii libgcc1 1:7.2.0-8
ii libgssapi-krb5-2 1.15.2-2
ii libshibsp-plugins 2.6.0+dfsg1-5
ii libshibsp7 2.6.0+dfsg1-5
ii libstdc++6 7.2.0-8
ii libxerces-c3.1 3.1.4+debian-2
ii libxmltooling7 1.6.0-5
ii shibboleth-sp2-utils 2.6.0+dfsg1-5
libapache2-mod-shib2 recommends no packages.
libapache2-mod-shib2 suggests no packages.
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=aRe/
-----END PGP SIGNATURE-----
More information about the Pkg-shibboleth-devel
mailing list