On 10/18/13 11:07 AM, "[log in to unmask]"
<[log in to unmask]> wrote:
>
>Ok. It's not deadly (i.e. everything goes kaboom), but it would be nice
>to be able to auth on a web server with "shibboleth" as well as
>Moonshot's "Negotiate". It appears that whereas mod_auth_gssapi bails on
>checking the AuthType (and finds it's not 'Negotiate'), mod_shib_22 might
>not be doing the same (or at least doesn't say so if DEBUG logging level
>is enabled).
It only runs on AuthType shibboleth, but that step happens later in the
code.
There are interactions with other modules requiring careful choices in
authz rules, but there's no segfault because of that.
-- Scott
|