Hi there, I try to set up Zope with Shibboleth SSO. Therefore I need to delegate authentication to Apache which should then pass the REMOTE_USER environment variable to Zope. Am I understanding right, that for this purpose I have to use the not so recommended fastcgi configuration? With the recommended RewriteRule I successfully receive the HTTP_REMOTE_USER header var in the REQUEST object, but not the REMOTE_USER environment variable. However, going this route would mean messing with the existing code, which uses REMOTE_USER currently set by Zope. I appreciate any help. Thank you, Sabine Sabine Grabner Softwareentwickler FH VORARLBERG University of Applied Sciences Hochschulstraße 1 6850 Dornbirn, Austria Telefon: +43 (0) 5572 792 2212 www.fhv.at GmbH, FN 165415h, LG Feldkirch
Hi Sabine, On 17/05/2011 07:07, Sabine Grabner wrote:
I try to set up Zope with Shibboleth SSO.
What are you using to do the Shibboleth auth?
Therefore I need to delegate authentication to Apache which should then pass the REMOTE_USER environment variable to Zope. Am I understanding right, that for this purpose I have to use the not so recommended fastcgi configuration?
No, I think, you're fine using the normal ZServer way of running Zope. You just need to get Zope into "remote user mode", from looking at the source, it appears you need to create a file called "access" in your INSTANCE_HOME and put the following in it: superuser:
REMOTE_USER environment variable. However, going this route would mean messing with the existing code, which uses REMOTE_USER currently set by Zope.
What existing code? cheers, Chris -- Simplistix - Content Management, Batch Processing & Python Consulting - http://www.simplistix.co.uk
participants (2)
-
Chris Withers -
Sabine Grabner