Phil: /* Shibboleth */

2020-12-17T13:46:19Z

Shibboleth

Phil: Created page with "In December 2020 we began the process of upgrading the primary department webserver, [https://www.cs.jhu.edu www.cs.jhu.edu], from Apache 2.2 to Apache 2.4. This includes '''..."

2020-12-16T18:28:50Z

Created page with "In December 2020 we began the process of upgrading the primary department webserver, [https://www.cs.jhu.edu www.cs.jhu.edu], from Apache 2.2 to Apache 2.4. This includes '''..."

New page

In December 2020 we began the process of upgrading the primary department webserver, [https://www.cs.jhu.edu www.cs.jhu.edu], from Apache 2.2 to Apache 2.4. This includes '''some incompatible changes'''; please read through this page to see if you need to adjust your website or personal web pages that we host.

In general, these changes should only matter if you use a <code>.htaccess</code> file anywhere within your webspace. You can find out if you have one by running the following command on one of our [[Linux Clients on the CS Grad/Research Net|Linux clients]]: <kbd>find ~/public_html -name .htaccess</kbd>

Everyone will have at least <code>~/public_html/.htaccess</code>; if that's your only file and the only thing in that file is an <code>FcgidWrapper</code> directive, you don't need to worry about anything on this page. Otherwise, please continue reading.

== Versioning ==

In cases where the syntax for something has changed, you will need to have ''both'' syntaxes present in order for things to work on both our old and new server. This will be required until the old server is fully retired, which we expect to happen in late January 2021.

To accomplish this, you will need to use Apache's [https://httpd.apache.org/docs/2.2/mod/mod_version.html#ifversion IfVersion] directive, roughly like this:

<pre>
<IfVersion < 2.4>
# Apache 2.2-specific things, e.g.:
# Order ...
# Allow ...
</IfVersion>
<IfVersion >= 2.4>
# Apache 2.4 things, e.g.:
# Require ...
</IfVersion>
</pre>

== Access ==

The Apache authorization directives have changed significantly. Instead of a combination of <code>Order</code> and <code>Allow</code> or <code>Deny</code> directives, you now need to use a singular <code>Require</code> directive. The [https://httpd.apache.org/docs/current/upgrading.html#run-time Apache upgrading page] goes into more detail, but some common cases are as follows:

Allow all:

<pre>
<IfVersion < 2.4>
Order allow,deny
Allow from all
</IfVersion>
<IfVersion >= 2.4>
Require all granted
</IfVersion>
</pre>

Allow only from a particular subnet:

<pre>
<IfVersion < 2.4>
Order deny,allow
Allow from 128.220.35.0/24
</IfVersion>
<IfVersion >= 2.4>
Require ip 128.220.35.0/24
</IfVersion>
</pre>

For setups requiring a password, see either the Shibboleth section below (if you're [[Using Shibboleth]]) or the [https://httpd.apache.org/docs/current/upgrading.html#run-time Apache upgrading page] (if you're using Apache's basic authentication).

== Shibboleth ==

The instructions from our [[Using Shibboleth]] page should be almost all of what you need. The only change you need to make is to look put the <code>ShibCompatWith24</code> directive inside an <code>IfVersion</code> clause:

<pre>
<IfVersion < 2.4>
ShibCompatWith24 On
</IfVersion>
</pre>

[[Category:Webpages and Webservices]]

@@ Line 55: / Line 55: @@
 == Shibboleth ==
-The instructions from our [[Using Shibboleth]] page should be almost all of what you need.  The only change you need to make is to look put the <code>ShibCompatWith24</code> directive inside an <code>IfVersion</code> clause:
+The instructions from our [[Using Shibboleth]] page should be almost all of what you need.  The only change you need to make is to put the <code>ShibCompatWith24</code> directive inside an <code>IfVersion</code> clause:
 <pre>

Apache 2.4 Upgrade Notes - Revision history

Phil: /* Shibboleth */

Phil: Created page with "In December 2020 we began the process of upgrading the primary department webserver, [https://www.cs.jhu.edu www.cs.jhu.edu], from Apache 2.2 to Apache 2.4. This includes '''..."