Mailing List Archive

SSO
Hi there,

I try to set up Zope with Shibboleth SSO. Therefore I need to delegate
authentication to Apache which should then pass the REMOTE_USER
environment variable to Zope. Am I understanding right, that for this
purpose I have to use the not so recommended fastcgi configuration?

With the recommended RewriteRule I successfully receive the
HTTP_REMOTE_USER header var in the REQUEST object, but not the
REMOTE_USER environment variable. However, going this route would mean
messing with the existing code, which uses REMOTE_USER currently set
by Zope.

I appreciate any help.

Thank you,

Sabine



Sabine Grabner
Softwareentwickler

FH VORARLBERG
University of Applied Sciences
Hochschulstraße 1
6850 Dornbirn, Austria

Telefon: +43 (0) 5572 792 2212

www.fhv.at

GmbH, FN 165415h, LG Feldkirch
Re: SSO [ In reply to ]
Hi Sabine,

On 17/05/2011 07:07, Sabine Grabner wrote:
> I try to set up Zope with Shibboleth SSO.

What are you using to do the Shibboleth auth?

> Therefore I need to delegate
> authentication to Apache which should then pass the REMOTE_USER
> environment variable to Zope. Am I understanding right, that for this
> purpose I have to use the not so recommended fastcgi configuration?

No, I think, you're fine using the normal ZServer way of running Zope.
You just need to get Zope into "remote user mode", from looking at the
source, it appears you need to create a file called "access" in your
INSTANCE_HOME and put the following in it:

superuser:

> REMOTE_USER environment variable. However, going this route would mean
> messing with the existing code, which uses REMOTE_USER currently set by
> Zope.

What existing code?

cheers,

Chris

--
Simplistix - Content Management, Batch Processing & Python Consulting
- http://www.simplistix.co.uk
_______________________________________________
Zope maillist - Zope@zope.org
https://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
https://mail.zope.org/mailman/listinfo/zope-announce
https://mail.zope.org/mailman/listinfo/zope-dev )