[shibboleth-sp2] 01/01: Install upstream's default Apache 2.4 configuration

[Russ Allbery]

Etienne Dysli Metref <edm-guest at moszumanska.debian.org> writes:

> commit 81662b4b4767ccd59630de74eab9365a72ca2adc
> Author: Etienne Dysli Metref <etienne.dysli-metref at switch.ch>
> Date:   Tue Nov 14 16:35:00 2017 +0100

>     Install upstream's default Apache 2.4 configuration
>     
>     Install upstream's default Apache 2.4 configuration in addition to the
>     module-loading directive. Notably, this configuration enables
>     unrestricted access to the handler at `/Shibboleth.sso`.

[...]

> +#
> +# Ensures handler will be accessible.
> +#
> +<Location /Shibboleth.sso>
> +  AuthType None
> +  Require all granted
> +</Location>
> +
> +#
> +# Used for example style sheet in error templates.
> +#
> +<IfModule mod_alias.c>
> +  <Location /shibboleth-sp>
> +    AuthType None
> +    Require all granted
> +  </Location>
> +  Alias /shibboleth-sp/main.css /usr/share/shibboleth/main.css
> +</IfModule>

In general, modules do not allocate URL namespace in the module .conf
file.  This makes it really painful to enable a module without giving up
part of your URL namespace, which traditionally is under the local control
of the administrator.

I think it makes sense to install this, but I'd put the <Location> blocks
in conf-available instead of as a conf file in mods-available.
conf-available blocks more commonly will allocate some URL namespace.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>