Bug#881724: libapache2-mod-shib2: Install recommended Apache configuration

Etienne Dysli-Metref etienne.dysli-metref at switch.ch
Tue Nov 14 14:37:19 UTC 2017


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package: libapache2-mod-shib2
Version: 2.6.0+dfsg1-5
Severity: wishlist

Dear maintainers,

Upstream provides and installs an Apache httpd configuration file with
some directives recommended for a correct operation of the Shibboleth
SP. While these directives are mentioned in
`/usr/share/doc/libapache2-mod-shib2/README.Debian.gz`, it would be
nicer to provide them in a form that can easily be enabled, e.g. under
`/etc/apache2/conf-available/` with the following content:

    ShibCompatValidUser Off
    <Location "/Shibboleth.sso">
      AuthType None
      Require all granted
    </Location>
    <IfModule mod_alias.c>
      <Location /shibboleth-sp>
        AuthType None
        Require all granted
      </Location>
      Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
    </IfModule>

I can provide a patch for this. What do you think? Should this
configuration be enabled upon installation as well?

Cheers,
   Etienne

- -- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.4.0-98-generic (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C
(charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages libapache2-mod-shib2 depends on:
ii  apache2-bin [apache2-api-20120211]  2.4.29-1
ii  libc6                               2.24-17
ii  libgcc1                             1:7.2.0-8
ii  libgssapi-krb5-2                    1.15.2-2
ii  libshibsp-plugins                   2.6.0+dfsg1-5
ii  libshibsp7                          2.6.0+dfsg1-5
ii  libstdc++6                          7.2.0-8
ii  libxerces-c3.1                      3.1.4+debian-2
ii  libxmltooling7                      1.6.0-5
ii  shibboleth-sp2-utils                2.6.0+dfsg1-5

libapache2-mod-shib2 recommends no packages.

libapache2-mod-shib2 suggests no packages.

- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=aRe/
-----END PGP SIGNATURE-----



More information about the Pkg-shibboleth-devel mailing list