1 260
szerkesztés
Módosítások
a
minor corrections
# Enable module at '''<code>Administer -> Site building -> Modules</code>'''
=== Compatibility ===
Module is being developed for Drupal 6.x. We try to backport new features to 5.x from time to time, though it might take several weeks. If you can help with backporting, please contact '''aai _AT_ niif _DOT_ hu'''!
Older versions of Drupal are not supported, nor is Drupal 7 as long as it is not the stable branch.
Both Shibboleth 1.3 and Shibboleth 2.x are supported.
{{ATTENTION_EN|When using along with Userprotect module (which is recommended anyway), there was a [http://drupal.org/node/305989 bug], which [http://drupal.org/node/306912 turned out to be] a [http://drupal.org/node/165642 Drupal core bug].
The bug was fixed in Drupal 5.10 and 6.4, so '''only versions above 5.10 and 6.4 are supported'''.}}
=== Upgrading module ===
There is no upgrade procedure (yet). Please If you are upgrading from the same major version, you don't even need to uninstall the module before upgrading. It is reported that sometimes disabling module and removing its directory is not enoughThis way your configuration (role mappings, etc) persists.
== Configuration ==
In Shibboleth there are two modes for protecting resources:
* '''Lazy Sessions''': session is only initiated if an application redirects user to the SessionInitiator URL. In this module, it is done by clicking the ''"Login with Shibboleth"'' link. Anonymous access is possibleas well as using other authentication methods.
:: <small>Detailed description of [[Lazy Session|lazy sessions]] in Hungarian.</small>
* '''"Strict" Sessions''' (normal sessions): users can only access Drupal content if they have a valid Shibboleth session. This case, no anonymous access can be granted (not even read-only)and you can not use any auxiliary authentication methods.
{{STOP|If you decide to use lazy sessions and you don't want your users to be able to log in with a password, '''YOU MUST DISABLE PASSWORD CHANGE'''. (See below.)}}
AuthType Shibboleth
ShibRequireSession Off
# the following single line is only valid for Shib2
ShibUseHeaders On
require shibboleth
