Shibboleth Developers

["Scott Cantor" <>]

Just to close the loop, I added authnContextClassRef and authnContextDeclRef
as reserved require rules for both of the ACL plugins shipped (XML and
htaccess).

Also added "user" as a reserved rule to the XML plugin, so it would handle
REMOTE_USER the same way the htaccess plugin does, to keep them consistent.

Require group is really an Apache thing, and in fact I should have just
omitted it, since you should use mod_authz_group for that now, but I'll
leave it alone.

-- Scott