Hi Brian -
Cosign 2 had some significant security issues...
https://www.cvedetails.com/vulnerability-list/vendor_id-6486/Cosign.html
...and Cosign 3 was released over five years ago.
The Cosign 3 server can talk to the Cosign 2 filter, though you should only
allow that during your transition period.
Cosign hasn't seen much active development in recent years. Your best
course of action would probably be to look at alternative SSOs, but if
Cosign is working and you'd like to stick with it, I think it would
probably be a better investment to upgrade to Cosign 3.x, rather than
getting the Cosign 2.x filter working with Apache 2.4.x
There isn't an official release of the cosign filter with Apache 2.4x
support, but this should work for you..
https://github.com/umich-iam/cosign/tree/cosign-3.2.1rc1
Liam
On Fri, Jun 17, 2016 at 5:04 PM, Brian Arthur <bart...@mercycorps.org>
wrote:
> I am working on upgrading to v3, but in the meantime, I need to compile
> Cosign on CentOS 7. Is v2 supported/workable on CentOS 7, Apache 2.4?
>
> My current error when starting Apache(or via httpd -M) is:
> undefined symbol: X509_NAME_get_text_by_NID
>
> Install process
> ./configure --enable-apache2=/usr/bin/apxs
> make
> make install
>
> FYI - the make fails unless I replace remote_ip with client_ip in
> ./filters/apache2/mod_cosign.c
>
> Thanks for your help.
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
> reports. http://sdm.link/zohomanageengine
> _______________________________________________
> Cosign-discuss mailing list
> Cosign-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
>
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
