(省略)
<VirtualHost _default_:443>
(省略)
ProxyPass /idp/ http://localhost:8080/idp/ connectiontimeout=5 timeout=15 ♯RequestHeader set REMOTE-USER %{REMOTE_USER}s ↑コメントアウト
<Location /idp/Authn/RemoteUser> SSLVerifyClient require SSLVerifyDepth 3 SSLRequireSSL # SSLOptions +ExportCertData +StdEnvVars SSLUserName SSL_CLIENT_S_DN_CN SSLRequire %{SSL_CLIENT_S_DN_O} eq "Test_University_A" RequestHeader set REMOTE_USER %{REMOTE_USER}s RewriteEngine On RewriteCond %{SSL:REMOTE_USER} ="" RewriteRule .* - [E=REMOTEUSERNULL] RequestHeader unset REMOTE_USER env=REMOTEUSERNULL </Location> SSLCACertificateFile /opt/shibboleth-idp/credentials/cacert.pem
(省略) </VirtualHost>
|