46 lines
1.9 KiB
Text
46 lines
1.9 KiB
Text
===========================================================================
|
|
$NetBSD: MESSAGE,v 1.5 2021/11/15 18:17:05 wiz Exp $
|
|
|
|
In order to use this module in your Apache installation, you need to
|
|
add the following to your httpd.conf file:
|
|
|
|
LoadModule auth_mellon_module lib/httpd/mod_auth_mellon.so
|
|
|
|
If upgrading from version prior 0.14.0, please note the following
|
|
backward-incompatible change:
|
|
|
|
* This version switches the default signature algorithm used when
|
|
signing messages from rsa-sha1 to rsa-sha256. If your IdP does not
|
|
allow messages to be signed with that algorithm, you need to add a
|
|
setting switching back to the old algorithm:
|
|
|
|
MellonSignatureMethod rsa-sha1
|
|
|
|
Note that this only affects messages sent from mod_auth_mellon to your
|
|
IdP. It does not affect authentication responses or other messages
|
|
sent from your IdP to mod_auth_mellon.
|
|
|
|
If upgrading from version prior 0.6.0, please note the following
|
|
backward-incompatible changes:
|
|
|
|
* The POST replay functionality has been disabled by default, and the
|
|
automatic creation of the MellonPostDirectory target directory has been
|
|
removed. If you want to use the POST replay functionality, create a
|
|
directory accessible only by the apache user (e.g.: /var/spool/mellon)
|
|
and add this after the LoadModule for mod_auth_mellon.so:
|
|
|
|
MellonPostDirectory /var/spool/mellon
|
|
|
|
* Start discovery service when accessing the login endpoint. We used
|
|
to bypass the discovery service in this case, and just pick the first
|
|
IdP. This has been changed to send a request to the discovery service
|
|
instead, if one is configured.
|
|
|
|
* The MellonLockFile default path has been changed to:
|
|
/var/run/mod_auth_mellon.lock
|
|
This only affects platforms where a lock file is required and
|
|
where Apache doesn't have write access to that directory during
|
|
startup. (Apache can normally create files in that directory
|
|
during startup.)
|
|
|
|
===========================================================================
|