[shibboleth-sp2] 01/01: Install upstream's default Apache 2.4 configuration

[Etienne Dysli-Metref]

On 14/11/17 18:04, Russ Allbery wrote:
> In general, modules do not allocate URL namespace in the module .conf
> file.  This makes it really painful to enable a module without giving up
> part of your URL namespace, which traditionally is under the local control
> of the administrator.

Thank you for the advice, Russ. :)

> I think it makes sense to install this, but I'd put the <Location> blocks
> in conf-available instead of as a conf file in mods-available.
> conf-available blocks more commonly will allocate some URL namespace.

Agreed. I'll move this over to conf-available.

What about `ShibCompatValidUser Off`? I'm somewhat hesitant to ship it
as is. On one hand, it is upstream's default, matching the behaviour of
previous versions. On the other hand, it causes mod_shib to break other
authentication modules when `Require valid-user` is used, unless set to
'on'.

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-shibboleth-devel/attachments/20171115/ecf58cc4/attachment.sig>