forked from Lainports/opnsense-ports
8cb1a96ede
Taken from: https://github.com/freebsd/freebsd-ports.git Commit id: 5070672073b68be364139bc6b3a89100bd17d331
32 lines
1.1 KiB
Text
32 lines
1.1 KiB
Text
======================================================================
|
|
Set a few required parameters in your Apache configuration:
|
|
|
|
CASCookiePath /var/cache/apache2/mod_auth_cas/
|
|
CASLoginURL https://login.example.org/cas/login
|
|
CASValidateURL https://login.example.org/cas/serviceValidate
|
|
|
|
Protect a "Location" or "Directory" block in your Apache configuration:
|
|
|
|
<Location /secured>
|
|
Authtype CAS
|
|
require valid-user
|
|
</Location>
|
|
|
|
If SAML-delivered attribute authorization is also desired, use the
|
|
samlValidate URL, enable SAML validation, and specify cas-attribute
|
|
in your require rule (please note: both attribute name and value are
|
|
case-sensitive):
|
|
|
|
CASCookiePath /var/cache/apache2/mod_auth_cas/
|
|
CASLoginURL https://login.example.org/cas/login
|
|
CASValidateURL https://login.example.org/cas/samlValidate
|
|
CASValidateSAML On
|
|
|
|
<Location /secured>
|
|
Authtype CAS
|
|
require cas-attribute edupersonaffiliation:staff
|
|
</Location>
|
|
|
|
For more informations see:
|
|
https://wiki.jasig.org/display/CASC/mod_auth_cas
|
|
======================================================================
|