From 8bc3edc1ab4ae36909a361a796c91ca9d00465cd Mon Sep 17 00:00:00 2001
From: Tom Downes <tpdownes@gmail.com>
Date: Mon, 10 Dec 2018 12:39:44 -0600
Subject: [PATCH] First semi-working copy of gracedb-test
---
docker/apache-config | 46 ++++++++++++++++++++++++++++++++++++++------
1 file changed, 40 insertions(+), 6 deletions(-)
diff --git a/docker/apache-config b/docker/apache-config
index ce1a9e622..21740dec2 100644
--- a/docker/apache-config
+++ b/docker/apache-config
@@ -1,7 +1,8 @@
ServerName ${DJANGO_PRIMARY_FQDN}
<VirtualHost *:80>
- ServerName ${DJANGO_PRIMARY_FQDN}
+ ServerName https://${DJANGO_PRIMARY_FQDN}:443
+ UseCanonicalName On
ServerSignature On
ErrorLog /dev/stderr
Transferlog /dev/stdout
@@ -63,21 +64,54 @@ ServerName ${DJANGO_PRIMARY_FQDN}
Alias /shibboleth-ds/idpselect.css /etc/shibboleth-ds/idpselect.css
<Directory /etc/shibboleth-ds>
- Require all granted
+ Require all granted
</Directory>
# Deny access to the DocumentRoot. This makes it possible to upload
# large files. See notes.
<Directory "/var/www/">
- Require all denied
+ Require all denied
</Directory>
<Directory "/app/gracedb_project/static_root/">
- AllowOverride None
- Options None
- Require all granted
+ AllowOverride None
+ Options None
+ Require all granted
</Directory>
Alias /robots.txt /home/gracedb/gracedb_project/static_root/robots.txt
+ <Location /Shibboleth.sso>
+ SetHandler shib
+ Require all granted
+ </Location>
+
+ <Location /shibboleth-sp>
+ Require all granted
+ </Location>
+
+ <Location "/post-login/">
+ AuthType Shibboleth
+ Require shibboleth
+ ShibRequestSetting requireSession true
+ ShibUseHeaders On
+ # Set shibboleth headers used for authentication. Differences are
+ # due to the fact that REMOTE_USER is apparently a special case and
+ # not a standard environment variable.
+ RequestHeader set REMOTE_USER "%{REMOTE_USER}s" "expr=-n %{REMOTE_USER}"
+ RequestHeader set ISMEMBEROF "%{ISMEMBEROF}e" env=ISMEMBEROF
+ </Location>
+
+ <Directory "/app/gracedb_project/docs/user_docs/build/">
+ Require all granted
+ </Directory>
+
+ # Restrict access to admin documentation
+ <Location "/admin_docs/">
+ AuthType Shibboleth
+ ShibRequestSetting requireSession true
+ ShibUseHeaders On
+ Require user tanner.prestegard@LIGO.ORG alexander.pace@LIGO.ORG patrick.brady@LIGO.ORG thomas.downes@LIGO.ORG
+ </Location>
+
</VirtualHost>
--
GitLab