verglasz/soc-ops
0
0
Fork 0
forked from SUNET/soc-ops
Code Pull requests Activity

Refining SSO

Browse source
This commit is contained in:
Johan Björklund 2025-01-14 13:43:22 +01:00
parent 5f0e27f95c
commit 012331604f
Signed by untrusted user: bjorklund
GPG key ID: 5E8401339C7F5037
3 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
global/overlay/etc/puppet/cosmos-rules.yaml
View file

@ -98,4 +98,5 @@ zammad-test.cert.sunet.se:
groups: groups:
- 'sunet-cert' - 'sunet-cert'
entityID: 'https://test-sso-proxy.cert.sunet.se/idp' entityID: 'https://test-sso-proxy.cert.sunet.se/idp'
remote_user: true user_header: 'Remote-User'
single_user: true

1
global/overlay/etc/puppet/modules/soc/manifests/sso.pp
View file

@ -39,6 +39,7 @@ class soc::sso(
Array $passthrough = [], Array $passthrough = [],
Boolean $x_remote_user = false, Boolean $x_remote_user = false,
Boolean $remote_user = false, Boolean $remote_user = false,
String $user_header = undef,
Boolean $unset_auth_header = false, Boolean $unset_auth_header = false,
Boolean $single_user = false, Boolean $single_user = false,
Boolean $satosa = true, Boolean $satosa = true,

6
global/overlay/etc/puppet/modules/soc/templates/sso/apache-site.conf.erb
View file

@ -38,7 +38,11 @@
AuthType shibboleth AuthType shibboleth
ShibRequestSetting requireSession On ShibRequestSetting requireSession On
<%- if @x_remote_user -%> <%- if @user_header && !@single_user -%>
RequestHeader set @user_header %{REMOTE_USER}s
<%- elsif @user_header && $single_user -%>
RequestHeader set @user_header soc-user
<%- elsif @x_remote_user -%>
RequestHeader set X-Remote-User %{REMOTE_USER}s RequestHeader set X-Remote-User %{REMOTE_USER}s
<%- elsif @remote_user -%> <%- elsif @remote_user -%>
RequestHeader set Remote-User %{REMOTE_USER}s RequestHeader set Remote-User %{REMOTE_USER}s