[netmagis] Re: HTTP Authentication

  • From: Pierre DAVID <pdagog@xxxxxxxxx>
  • To: netmagis@xxxxxxxxxxxxx
  • Date: Fri, 13 Apr 2018 11:53:58 +0200

On Wed, Apr 11, 2018 at 04:48:09PM +0200, Arnaud HOUDELETTE wrote:

Hello.

We (ComUE Normandie-Université) use Netmagis 2.2.0 with Shibboleth authentication.

Netmagis is configured to use 'LDAP auth'... but apache is configured to do shibboleth auth instead of ldap, which enable us to authenticate users, even if we do not have their passwords in our ldap (a meta-directory, aggregate of our members ldaps ). This setup works currently well, but on an out of date system.

I'm currently looking to update the system and Netmagis to 2.3.X, but changelog shows :

- Netmagis is no longer based on Apache authentication.

Thus : We won't be able to use our previous setup anymore. Could shibboleth auth (or a more generic 'HTTP Headers' auth) could be feasible ?


We left Apache authentication to enable the "logout" feature which was
a highly requested feature. This led to large modifications on Netmagis
infrastructure, so re-enabling Apache authentication is not feasible.
We will see if we can include a work-around in the 3.0 release.

Pierre & Jean

Other related posts: