[Koha-bugs] [Bug 17776] Shibboleth Authentication is broken in plack

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17776

--- Comment #31 from Martin Renvoize <martin.renvoize at ptfs-europe.com> ---
(In reply to Marcel de Rooy from comment #30)
> What about the concerns listed in comment27 ?

Well, we could document that if using plack we strongly recommend you read the
documentation around NativeSPSpoofChecking and add a spoofKey as suggested
there. I believe that's all handled in the configuration of the Native Service
Provider package, so again somewhat outside of the scope of Koha code.. but I
agree to adding a doc patch pointing people there.. Would that allay your
concerns at all?

I do wish they would document what they mean by 'There are no known scenarios
in which environment variables can't be used' on that NativeSPSpoofChecking
page.. I certainly know of no way to get around our scenario.

-- 
You are receiving this mail because:
You are watching all bug changes.