Hi, Eric.

Actually, I do get the cosign login page. After I've logged in, I get the internal server error. Do you mean that I should move my cosign directives around like this, or something else?

<VirtualHost 141.212.xxx.xxx:1111>
...     [cosign stuff previously up here]
        <IfModule mod_ssl.c>
                ...
        </IfModule>
        <IfModule mod_dav.c>
                ...
        </IfModule>
        AccessFileName .htaccess
        <Directory "/Library/WebServer/otherdirectory">
                CosignProtected On
                CosignHostname weblogin.umich.edu
                CosignRedirect https://weblogin.umich.edu/
                CosignPostErrorRedirect 
https://weblogin.umich.edu/post_error.html
                CosignService someserver
CosignCrypto /etc/httpd/ssl_key/server.key /etc/httpd/ssl_key/ someserver_umich_edu.crt /usr/local/etc/apache/certs
                AllowOverride AuthConfig Limit
                AuthType Cosign
                Options All -Indexes +ExecCGI +Includes +MultiViews
                Require user cafrica
        </Directory>
....

In my port 443 virtual host file (the one that gives me SSL in my zope site), I already tried using the <Location> directive and putting my cosign stuff in a subdirectory of the main site. But that broke zope, which is why it's back in its own vhost.

Thanks!

--
Chris Africa
Web Project Manager
Department of Mechanical Engineering
University of Michigan
734-764-8482
Fridays: 734-355-6577
AIM/iChat/Skype ID: baiewola


On Jun 27, 2007, at 1:57 PM, Eric Covener wrote:

On 6/27/07, Chris Africa <[EMAIL PROTECTED]> wrote:
Hi Everyone.

[Wed Jun 27 08:55:10 2007] [crit] [client 141.212.xxx.xxx]
configuration error:  couldn't check access.  No groups file?: /

ISTR cosign has a weird way of merging some config values -- and it looks
like cosign is declining to participate during authorization.

Have you tried specifying some of the cosign directives in directory
context instead of vhost context (e.g. CosignProtected on)

--
Eric Covener
[EMAIL PROTECTED]

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


!DSPAM:4682a51b266991903312405!





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to