Shibboleth and authorizer mode

[dubstep]

Hello everyone

I need to confirm something for a work colleague

This page

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig

states this

“Nginx has fastcgi responder support but not the “authorizer” mode
needed for the filter. Until this support exists nginx cannot be used in
this way.”

Can anyone confirm that is still the case? If so, are there any plans
to remedy this situation? If not, please say, I just need to let
someone else know.

Thanks

V

Posted at Nginx Forum:
http://forum.nginx.org/read.php?2,218694,218694#msg-218694

[vanderkerkoff]

Hello!

On Mon, Nov 21, 2011 at 06:08:09AM -0500, vanderkerkoff wrote:

“Nginx has fastcgi responder support but not the “authorizer” mode
needed for the filter. Until this support exists nginx cannot be used in
this way.”

Can anyone confirm that is still the case? If so, are there any plans
to remedy this situation? If not, please say, I just need to let
someone else know.

Confirmed: nginx doesn’t support fastcgi authorizer role (as well
as fastcgi filter role).

There are no plans to fix this. If you need functionality mostly
identical to fastcgi authorizers (but not bound to fastcgi), you
may want to take a look at auth_request module,

http://mdounin.ru/hg/ngx_http_auth_request_module/

Maxim D.

[vanderkerkoff]

Thanks Maxim

You wouldn’t know off the top of your head if I could use auth_request
to authorize with shibboleth would you?

V

Posted at Nginx Forum:
http://forum.nginx.org/read.php?2,218694,218696#msg-218696

[vanderkerkoff]

Hello!

On Mon, Nov 21, 2011 at 06:22:26AM -0500, vanderkerkoff wrote:

Thanks Maxim

You wouldn’t know off the top of your head if I could use auth_request
to authorize with shibboleth would you?

No idea, most likely the answer is “no” as long as it needs
fastcgi authorizer role.

Auth_request is similar in the functionality it provides, but a
bit different in details how it’s implemented.

Maxim D.

[vanderkerkoff]

Hi,

I need to implement shebboleth SP with nginx webserver but got to know
that
nginx doesn’t support autorizer mode.
I saw that the above post is dated very old.

I would like to check whether this is still the case or has there been
any
fix provided from nginx for this ?
Is there any way this can be achieved ?

Regards,
Amit Thukral

Posted at Nginx Forum:
http://forum.nginx.org/read.php?2,218694,237063#msg-237063

[vanderkerkoff]

Thanks Maxim

Posted at Nginx Forum:
http://forum.nginx.org/read.php?2,218694,218705#msg-218705