On 06/03/2011 02:32 PM, Tommy Peterson wrote:
Yes. Here is what I had to start with

Please don't top-post.

<LocationMatch "/drupal/online-courses\?id=\d">
    AuthType shibboleth
    ShibRequireSession On
    ShibUseHeaders On
    require shibboleth
</LocationMatch>


LocationMatch cannot match a query string, you need a rewriterule for that.
From the documentation:

For all origin (non-proxy) requests, the URL to be matched is a URL-path of the form|/path/|./No scheme, hostname, port, or query string *may be included.
*
/
<Location /drupal/user>
   AuthType shibboleth
    ShibRequireSession On
    ShibUseHeaders On
    require shibboleth
</Location>


If any of these ALSO have a physical directory, the result is less clear-cut.

Authentication should be performed on physical directories whenever possible.


--
J.

Reply via email to