Shibboleth Developers

["Scott Cantor" <>]

> So, all I have in the appropriate virtual host clauses is:
> 
>      <Location /secure>
>          AuthType shibboleth
>          ShibRequireSession on
>          require valid-user
>      </Location>

Right, the ShibRequireSession command is equivalent to the requireSession
XML attribute in shibboleth.xml

Basically, in 1.3, there is feature overlap so that any commands you can put
in Host or Path can be done by Apache and it's in sync.

> OK, so now I have an explanation, two separate workrounds and Apache to 
> blame.  Should I just leave it there or do you want some kind of 
> placeholder bugzilla entry?

Please file a bug and include as much configuration detail as possible. When
time permits I'll work on reproducing it and see if I can figure out a
work-around in code.

-- Scott