In httpd.conf I have:


    CosignProtected           On
    CosignHostname              weblogin.umich.edu
    CosignRedirect              https://weblogin.umich.edu/
    CosignPostErrorRedirect https://weblogin.umich.edu/cosign/post_error.html
    CosignService              drupal.onsp
CosignCrypto /etc/apache2/ssl.key/server.key /etc/apache2/ssl.crt/cosign.crt 
/etc/ssl/certs
    CosignValidReference        ^https?:\/\/.*\.umich\.edu(/.*)?
    CosignValidationErrorRedirect  
https://weblogin.umich.edu/cosign/validation_error.html

#
Include /etc/apache2/vhosts.d/*.conf

In vhosts.d/drupal.onsp.umich.edu.conf I have:

<Location /cosign/valid>
      RewriteEngine off
    </Location>

I just copied what I believe to be the relevant pieces. Also, I've been messing 
in those quite a bit. This is just the last incarnation.

I can give you more detail if you want.

Thanks,
Brian




-----Original Message-----
From: Liam Hoekenga [mailto:[email protected]] 
Sent: Wednesday, December 15, 2010 3:36 PM
To: Lee, Brian
Cc: Montague, Mark; [email protected]
Subject: Re: [Cosign-discuss] need mod_cosign.so binary (cosign 3)

What does your cosign configuration look like in apache?

Liam


Quoting "Lee, Brian" <[email protected]>:

> So now I think I'm validating correctly, but I have a redirection problem.
>
>                 "The page isn't redirecting properly"
> --Brian
>
> From: Lee, Brian [mailto:[email protected]]
> Sent: Wednesday, December 15, 2010 2:12 PM
> To: Montague, Mark; [email protected]
> Subject: Re: [Cosign-discuss] need mod_cosign.so binary (cosign 3)
>
> Thanks Mark.
>
> I did manage to get my hands on a trusted cosign 3 binary from  
> someone here, and it helped.
>
>
> It got rid of my errors about not understanding certain config options.
>
>
>
> For example:
>
>
>
> In my configuration, I use 'CosignValidReference', which was added  
> in Cosign version 3.
>
> With my old mod_cosign.so, I get this error when I restart apache2
>
> "Invalid command 'CosignValidReference', perhaps misspelled or  
> defined by a module not included in the server configuration"
>
> When I use the new binary, that error goes away.
>
>
>
> Now I have other problems (validation - not getting my cookie), but  
> that was helpful. Thank you.
>
>
>
> --Brian
>
>
> From: Mark Montague [mailto:[email protected]]
> Sent: Tuesday, December 14, 2010 10:01 PM
> To: [email protected]; Lee, Brian
> Subject: Re: [Cosign-discuss] need mod_cosign.so binary (cosign 3)
>
> On December 14, 2010 10:22 , "Lee, Brian"  
> <[email protected]><mailto:[email protected]> wrote:
> I tried like heck to get apsx2 installed so that I could compile my  
> own cosign 3 binary, but it is extremely difficult to install that  
> on my server. I will install one rpm, then get a list of  
> dependencies a mile long, install some of those, then discover more  
> dependencies. It's very difficult.
>
> Could someone send me a cosign (version 3) mod_cosign.so binary  
> file? If it was compiled for any flavor of linux, I'll give it a try.
>
> I strongly recommend that you do not run any mod_cosign binary  
> compiled by someone else, unless you personally know and trust that  
> person.  You may want to ask other Unix system administrators at  
> your local institution if they have a the latest mod_cosign filter  
> compiled for the version of SuSE that you are running.
>
> Keep in mind that apxs2 needs to be compiled for the same version of  
> Apache HTTP Server that you are running, with the same options, same  
> compilation switches, and same libraries.  Therefore you should get  
> apxs2 from the same place you got httpd.  I have not run SuSE  
> myself, but it looks like you need to install the apache2-devel  
> package from the oss repository:
>
> http://forums.opensuse.org/archives/sf-archives/archives-software/331878-where-apxs-libapreq2-suse-10-2-a.html
>
>
> --
>
>   Mark Montague
>
>   [email protected]<mailto:[email protected]>
>
>
> !DSPAM:4d09253145601955821274!
>



------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to