openstack
/
keystone
Code Issues Proposed changes

Update 'Configure Federation' documentation. 

Apache 2.4 becomes more and more popular version of HTTP server.
With its release some options required for proper Shibboleth Service
Provider have changed. This patch updates information about ``ShibRequireAll``
options that is no longer valid under Apache 2.4. It also adds
documentation reference so users can read more about configuring Apache
Virtual Hosts along with Shibboleth Service Provider.

Change-Id: Idbec6690fd1d75f078a6bdcaa6388b885387b45d
This commit is contained in:
Marek Denis 2014-09-18 15:44:33 +02:00
parent a56d36311c
commit abf6600cc1
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/source/configure_federation.rst
View File

@ -86,8 +86,13 @@ Make sure you add two *<Location>* directives to the *wsgi-keystone.conf*::
.. NOTE::
* ``saml2`` may be different in your deployment, but do not use a wildcard value.
Otherwise *every* federated protocol will be handled by Shibboleth.
* The ``ShibRequireSession`` rule is invalid in Apache 2.4+ and should be dropped
in that specific setup.
* The ``ShibRequireSession`` and ``ShibRequireAll`` rules are invalid in
Apache 2.4+ and should be dropped in that specific setup.
* You are advised to carefully examine `Shibboleth Apache configuration
documentation
<https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig>`_
Enable the Keystone virtual host, for example: