Return to lonshibauth.pm CVS log

Up to [LON-CAPA] / loncom / auth

- Too early in request for $ENV{'SERVER_PORT'} to be set, so determine if
  this server needs https or http from configuration in hosts.tab

    1: # The LearningOnline Network
    2: # Redirect Shibboleth authentication to designated URL (/adm/sso).
    3: #
    4: # $Id: lonshibauth.pm,v 1.3 2015/05/17 17:34:43 raeburn Exp $
    5: #
    6: # Copyright Michigan State University Board of Trustees
    7: #
    8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
    9: #
   10: # LON-CAPA is free software; you can redistribute it and/or modify
   11: # it under the terms of the GNU General Public License as published by
   12: # the Free Software Foundation; either version 2 of the License, or
   13: # (at your option) any later version.
   14: #
   15: # LON-CAPA is distributed in the hope that it will be useful,
   16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   18: # GNU General Public License for more details.
   19: #
   20: # You should have received a copy of the GNU General Public License
   21: # along with LON-CAPA; if not, write to the Free Software
   22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   23: #
   24: # /home/httpd/html/adm/gpl.txt
   25: #
   26: # http://www.lon-capa.org/
   27: #
   28: 
   29: =head1 NAME
   30: 
   31: Apache::lonshibauth - Redirect Shibboleth authentication
   32: 
   33: =head1 SYNOPSIS
   34: 
   35: Invoked when lonOtherAuthen is set to yes, and type is Shibboleth 
   36: 
   37: If server is configured as a Shibboleth SP, the main Apache 
   38: configuration file, e.g.,  /etc/httpd/conf/httpd.conf
   39: (for RHEL/CentOS/Scentific Linux/Fedora) should contain:
   40: 
   41: LoadModule mod_shib /usr/lib/shibboleth/mod_shib_22.so
   42: 
   43: or equivalent (depending on Apache version) 
   44: before the line to include conf/loncapa_apache.conf
   45: 
   46: =head1 INTRODUCTION
   47: 
   48: Redirects a user requiring Single Sign On via Shibboleth to a  
   49: URL -- /adm/sso -- on the server which is configured to use that service.
   50: 
   51: =head1 HANDLER SUBROUTINE
   52: 
   53: This routine is called by Apache and mod_perl.
   54: 
   55: =over 4
   56: 
   57: If $r->user defined and requested uri not /adm/sso
   58: redirect to /adm/sso
   59: 
   60: Otherwise return DECLINED
   61: 
   62: =back
   63: 
   64: =cut
   65: 
   66: package Apache::lonshibauth;
   67: 
   68: use strict;
   69: use lib '/home/httpd/lib/perl/';
   70: use Apache::lonnet;
   71: use Apache::Constants qw(:common REDIRECT);
   72: use LONCAPA qw(:DEFAULT);
   73: 
   74: sub handler {
   75:     my $r = shift;
   76:     my $target = '/adm/sso';
   77:     if (($r->user eq '') && ($r->uri() ne $target)) {
   78:         my $lonhost = $Apache::lonnet::perlvar{'lonHostID'};
   79:         my $hostname = &Apache::lonnet::hostname($lonhost);
   80:         if (!$hostname) { $hostname = $r->hostname(); }
   81:         my $protocol = $Apache::lonnet::protocol{$lonhost};
   82:         unless ($protocol eq 'https') { $protocol = 'http'; }
   83:         my $dest = $protocol.'://'.$hostname.$target;
   84:         $r->subprocess_env;
   85:         if ($ENV{'QUERY_STRING'} ne '') {
   86:             $dest .= '?'.$ENV{'QUERY_STRING'};
   87:         }
   88:         $r->header_out(Location => $dest);
   89:         return REDIRECT;
   90:     } else {
   91:         return DECLINED;
   92:     }
   93: }
   94: 
   95: 1;
   96: __END__