orchardcms - Orchard CMS and Shibboleth authentication -
we're looking @ using orchard internal site.
we use shibboleth initial authentication, makes post our site in format of http://domain/shibboleth.sso/{stuff}
in our current asp.net mvc website needed modify global.asax following:
routes.ignoreroute("shibboleth.sso/{isapiinfo}/{isapidetails}"); routes.ignoreroute("shibboleth.sso/{*pathinfo}");
unfortunately, orchard doesn't allow go route, after research looks requires handler added.
via iis (server 2008 r2) added web.config within handlers group:
<add name="shib" path="*.sso" verb="*" modules="isapifiltermodule" scriptprocessor="c:\{path}\isapi_shib.dll" resourcetype="either" requireaccess="script" precondition="integratedmode" />
i've tried couple different variations of this, , still no dice.
since pulled down source anyway, tried going simple route of adding 2 routes.ignoreroute
calls , re-building, results in same issue.
if remove shib requirement orchard starts fine, , if put in new mvc project shib on (and our 2 ignoreroute calls added) works fine.
the browser returning 404 (blank page), have feeling orchard still grabbing request.
any suggestions on how go getting orchard skip on path?
i ended doing 2 things.
first, created new module using not found mvc template. in particular the installermodule code.
i added following in system.web > httpmodules:
<add name="installermodule" type="ignoreshibboleth.installermodule, ignoreshibboleth" />
i added same system.webserver > modules.
all code did add in ignore routes.
routes.ignoreroute("shibboleth.sso/{isapiinfo}/{isapidetails}"); routes.ignoreroute("shibboleth.sso/{*pathinfo}");
the final step close on. added following under system.webserver > handlers, after <clear />
:
<add name="shib" path="*.sso" verb="*" modules="isapimodule" scriptprocessor="{path-to}\lib\shibboleth\isapi_shib.dll" resourcetype="unspecified" requireaccess="script" precondition="integratedmode,bitness64" />
the last time wasn't required in past, seems necessary orchard doing.
Comments
Post a Comment