CoSign: Collaborative Single Sign-On  
AnnouncementsDiscussion
 

cosign-discuss at umich.edu
general discussion of cosign development and deployment
 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: /services directory




Johanna,


When I protect /services based on your example httpd.conf file, I get a 503 service unavailable error. My guess is that it is caused by a certificate problem. In the CosignCrypto directive, are these certs different than the ones you are using for cosign server itself?

CosignCrypto weblogin.key weblogin.cert /var/cosign/certs/CA

If you login to the weblogin server directly, you are automatically directed to the /services directory. If I choose not to protect this directory, what options are available so the user doesn't see a 403 forbidden error? We don't want the user to be confused if they accidentally take this path.

Thanks,
Dave

--On Tuesday, March 01, 2005 5:49 PM -0500 johanna bromberg craig <canna@xxxxxxxxx> wrote:

/services does not have to be protected, though we implement it that way
so that we can give a different service menu to those who are "friends"
as opposed to "umich users."

I guess you are running the filter? What do the error logs say?

Attached is an excerpt with the relevant configuration for our weblogin
server.

-J





On Mar 1, 2005, at 5:26 PM, David Alexander wrote:


Can someone explain how I cosign protect the /services directory of a weblogin server? Are you supposed to install the cosign filter on the weblogin server?

Currently, when I login, I am redirected to /services and receive a
403 forbidden error.

Thanks,
Dave

--
David Alexander
Computer Network Services, Ohio University
alexandd@xxxxxxxx
740-593-0698

!DSPAM:4224ef81277237358314579!






-- David Alexander Computer Network Services, Ohio University alexandd@xxxxxxxx 740-593-0698


 
Copyright © 2002 - 2004 Regents of the University of Michigan :  Page last updated 15-December-2010