LP2008252: Fix report output access when Shibboleth is enabled rel_3_10
authorJason Boyer <JBoyer@equinoxOLI.org>
Thu, 23 Feb 2023 17:44:00 +0000 (12:44 -0500)
committerGalen Charlton <gmc@equinoxOLI.org>
Tue, 30 May 2023 19:02:31 +0000 (15:02 -0400)
When mod_shib is enabled use the ShibCompatValidUser option to ensure
report outputs load correctly.

Additionally, since it's SSO related, mention the sso_loc variable in
a comment for the apache config.

Signed-off-by: Jason Boyer <JBoyer@equinoxOLI.org>
Signed-off-by: Jeff Davis <jeff.davis@bc.libraries.coop>
Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
Open-ILS/examples/apache_24/eg.conf.in
Open-ILS/examples/apache_24/eg_vhost.conf.in

index 0733794..64bd3cb 100644 (file)
@@ -118,6 +118,12 @@ ExpiresByType text/css "access plus 1 year"
     #
     # SetEnv carousel_loc 1
 
+    # Uncomment and set this variable to the id of the context org unit
+    # you want to provide SSO / Shibboleth settings for this vhost.
+    # If sso_loc is not set physical_loc will be used instead
+    #
+    # SetEnv sso_loc 1
+
     # If you don't have an SSL cert, you can create self-signed 
     # certificate and key with:
     # openssl req -new -x509 -nodes -out server.crt -keyout server.key
index aed61b6..e6ead93 100644 (file)
@@ -523,6 +523,11 @@ RewriteRule .? - [E=locale:%{HTTP:Accept-Language}]
     PerlSendHeader On
 </Location>
 
+# Currently required for access to reports when Shibboleth is enabled; may not be necessary once Angularized?
+<IfModule mod_shib>
+    ShibCompatValidUser On
+</IfModule>
+
 # ----------------------------------------------------------------------------------
 # Reports GUI
 # ----------------------------------------------------------------------------------