[shibboleth-sp2] 01/01: Install upstream's default Apache 2.4 configuration

[Russ Allbery]

Etienne Dysli-Metref <etienne.dysli-metref at switch.ch> writes:

> What about `ShibCompatValidUser Off`? I'm somewhat hesitant to ship it
> as is. On one hand, it is upstream's default, matching the behaviour of
> previous versions. On the other hand, it causes mod_shib to break other
> authentication modules when `Require valid-user` is used, unless set to
> 'on'.

My inclination would be to install that whole file as shipped by upstream
into conf-available.  Other Apache-related packages in Debian tend to do
things like that, including settings that might break things.  It's very
easy to remove those config files with a2disconf and then customize
things as the local administrator.

I'd avoid putting anything potentially controversial in the module
configuration, since a2dismod removes the whole module, not just the
config, and there are no good tools in Debian to remove only the conf file
and not the load file.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>