On Apr 24, 2009, at 4:47 PM, Steve Devine wrote:

> Well I am making progress but I am pretty sure I am not getting the  
> idea
> behind this new conf file in version 3.
>
> Can some one give me an example of what you might put in the  
> cosign.conf
> file on the weblogin server if the directory on the application server
> mytestserver.ats.msu.edu
> was like so :
>
> <Directory "/home/www/ssl-htdocs/protected">
>        CosignProtected On
>        CosignService          MyTest
>      Options Indexes FollowSymLinks MultiViews
>        Order allow,deny
>        Allow from all
> </Directory>

This is all fine.

> This is what I have now:
>
> service cosign-MyTest https://mytestserver.ats.msu.edu/cosign/valid T
> MyTest\mytestserver\.ats\.msu\.edu

This looks fine, too, except for maybe a missing dot after the first  
backslash. Is your certificate CN really  
"MyTest.mytestserver.ats.msu.edu"? Or is the CN just  
mytestserver.ats.msu.edu?

> Also whats the purpose of  /cosign/valid ?

This is the location mod_cosign intercepts to validate the cookie and  
the service URL. You need to tell Apache that mod_cosign will handle  
requests for this URI. This is what we're recommending:

<Location /cosign/valid>
        SetHandler              cosign
        CosignProtected Off
        Allow from all
        Satisfy any
</Location>

> Does this need to exist on the filesystem?

No, see above.

> My apache logs are giving me this
>
> [Fri Apr 24 16:28:28 2009] [notice] mod_cosign: invalid destination:
> https://mytestserver.ats.msu.edu/protected

This suggests your CosignValidReference regex does not match that  
service URL. What have you got it set to?

andrew


------------------------------------------------------------------------------
Crystal Reports &#45; New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty&#45;free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to