Forum: NGINX shibboleth and authorizer mode

Hello everyone

I need to confirm something for a work colleague

This page

https://wiki.shibboleth.net/confluence/display/SHI...

 states this

"Nginx has fastcgi responder support but not the "authorizer" mode
needed for the filter. Until this support exists nginx cannot be used in
this way."

Can anyone confirm that is still the case?  If so, are there any plans
to remedy this situation?  If not, please say, I just need to let
someone else know.

Thanks

V

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,218694,218694#msg-218694

Hello!

On Mon, Nov 21, 2011 at 06:08:09AM -0500, vanderkerkoff wrote:

> "Nginx has fastcgi responder support but not the "authorizer" mode
> needed for the filter. Until this support exists nginx cannot be used in
> this way."
>
> Can anyone confirm that is still the case?  If so, are there any plans
> to remedy this situation?  If not, please say, I just need to let
> someone else know.

Confirmed: nginx doesn't support fastcgi authorizer role (as well
as fastcgi filter role).

There are no plans to fix this.  If you need functionality mostly
identical to fastcgi authorizers (but not bound to fastcgi), you
may want to take a look at auth_request module,

http://mdounin.ru/hg/ngx_http_auth_request_module/

Maxim Dounin

Thanks Maxim

You wouldn't know off the top of your head if I could use auth_request
to authorize with shibboleth would you?

V

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,218694,218696#msg-218696

Hello!

On Mon, Nov 21, 2011 at 06:22:26AM -0500, vanderkerkoff wrote:

> Thanks Maxim
>
> You wouldn't know off the top of your head if I could use auth_request
> to authorize with shibboleth would you?

No idea, most likely the answer is "no" as long as it needs
fastcgi authorizer role.

Auth_request is similar in the functionality it provides, but a
bit different in details how it's implemented.

Maxim Dounin

Thanks Maxim

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,218694,218705#msg-218705

Hi,

I need to implement shebboleth SP with nginx webserver but got to know 
that
nginx doesn't support autorizer mode.
I saw that the above post is dated very old.

I would like to check whether this is still the case or has there been 
any
fix provided from nginx for this ?
Is there any way this can be achieved ?

Regards,
Amit Thukral

Posted at Nginx Forum: 
http://forum.nginx.org/read.php?2,218694,237063#msg-237063