--- loncom/loncapa_apache.conf	2012/02/27 03:06:37	1.210
+++ loncom/loncapa_apache.conf	2012/03/05 20:51:25	1.212
@@ -1,7 +1,7 @@
 ##
 ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file
 ##
-## $Id: loncapa_apache.conf,v 1.210 2012/02/27 03:06:37 raeburn Exp $
+## $Id: loncapa_apache.conf,v 1.212 2012/03/05 20:51:25 raeburn Exp $
 ##
 
 #
@@ -52,6 +52,12 @@ PerlCleanupHandler	Apache::lonacc::clean
 PerlAuthenHandler Apache::checkauthen
 PerlSetVar lonOtherAuthen no
 
+<IfModule mod_shib>
+    PerlAuthenHandler Apache::lonshibauth
+    PerlSetVar lonOtherAuthen yes
+    PerlSetVar lonOtherAuthenType Shibboleth
+</IfModule>
+
 #PerlWarn On
 <LocationMatch "^/+res/adm/pages/[^/]+\.(gif|png)$">
 PerlAuthenHandler	'sub { return OK }' 
@@ -272,19 +278,27 @@ ErrorDocument	  500 /adm/errorhandler
 </LocationMatch>
 
 <LocationMatch "^/+webdav/[\w\-]+/[\w\-]+/">
-AuthType Basic
-AuthName "LONCAPA username,domain"
-Require valid-user
-SSLRequireSSL
-PerlAuthenHandler Apache::lonwebdavauth
-PerlAuthzHandler Apache::lonwebdavacc
-Dav On
-DirectoryIndex index.missing
-Options Indexes FollowSymLinks
-ErrorDocument     403 /adm/nowebdav.html
-ErrorDocument     404 /adm/notfound.html
-ErrorDocument     406 /adm/unauthorized
-ErrorDocument     500 /adm/errorhandler
+  <IfModule mod_ssl.c>
+    AuthType Basic
+    AuthName "LONCAPA username,domain"
+    Require valid-user
+    SSLRequireSSL
+    PerlAuthenHandler Apache::lonwebdavauth
+    PerlAuthzHandler Apache::lonwebdavacc
+    Dav On
+    DirectoryIndex index.missing
+    Options Indexes FollowSymLinks
+    ErrorDocument     403 /adm/nowebdav.html
+    ErrorDocument     404 /adm/notfound.html
+    ErrorDocument     406 /adm/unauthorized
+    ErrorDocument     500 /adm/errorhandler
+  </IfModule>
+  <IfModule !mod_ssl.c>
+    <IfModule mod_rewrite.c>
+        RewriteEngine on
+        RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L]
+    </IfModule>
+  </IfModule>
 </LocationMatch>
 
 <LocationMatch "^/+raw.*">
@@ -655,6 +669,18 @@ SetHandler perl-script
 PerlHandler Apache::migrateuser
 </Location>
 
+<Location /adm/sso>
+  <IfModule mod_shib>
+    AuthType shibboleth
+    ShibUseEnvironment On
+    ShibRequestSetting requireSession 1
+    ShibRequestSetting redirectToSSL 443
+    require valid-user
+    PerlAuthzHandler       Apache::lonshibacc
+    PerlAuthzHandler       Apache::lonacc
+  </IfModule>
+</Location>
+
 <Location /adm/annotations>
 AuthType LONCAPA
 Require valid-user