https://issues.shibboleth.net/jira/browse/SSPCPP-493

[shibboleth/cpp-sp.git] / configs / apache.config.in

diff --git a/configs/apache.config.in b/configs/apache.config.in
index 54d64b6..998c864 100644 (file)
--- a/configs/apache.config.in
+++ b/configs/apache.config.in
@@ -18,21 +18,30 @@ LoadModule mod_shib @-PKGLIBDIR-@/mod_shib_13.so
 # extension.
 #
 <Files *.sso>
-SetHandler shib-handler
+  SetHandler shib-handler
 </Files>
 
-# Another way of addressing this is to apply Shibboleth
-# globally to the site in "lazy" session mode:
-# <Location />
-# AuthType shibboleth
-# require shibboleth
-# </Location>
+#
+# Ensures handler will be accessible.
+#
+<Location /Shibboleth.sso>
+  Satisfy Any
+  Allow from all
+  AuthType None
+  Require all granted
+</Location>
 
 #
 # Used for example style sheet in error templates.
 #
 <IfModule mod_alias.c>
   Alias /shibboleth-sp/main.css @-PKGWEBDIR-@/main.css
+  <Location /shibboleth-sp>
+    Satisfy Any
+    Allow from all
+    AuthType None
+    Require all granted
+  </Location>
 </IfModule>
 
 #