Androclese

Thank you for the software update. We will fully test it later today and I will let you know the results when we are done.

Done.

https://github.com/michaelryanmcneill/shibboleth/issues/22

Can you point out where in your code you are doing the Role check? At minimum, I might be able to determine a work-around.

For anybody wanting to use RHEL’s mod_auth_mellon with this Plugin, here is how we got it working:

In the .htaccess file, create the following entry above the standard “WordPress” entry:

# BEGIN mod_auth_mellon
RewriteEngine On
RewriteCond %{QUERY_STRING} ^(.*)target(.*)$
RewriteRule ^mellon/login /mellon/login?%1ReturnTo%2
RewriteCond %{REQUEST_URI} !^/mellon/
# END mod_auth_mellon

Then below the “WordPress” entry, put this around the existing “Shibboleth” entry this Plugin creates to hide it from Apache httpd.

# BEGIN DO_NOT_ERASE_ME
<IfModule mod_does_not_exist.c>
# END DO_NOT_ERASE_ME

# BEGIN Shibboleth
AuthType Shibboleth
Require Shibboleth
# END Shibboleth

# BEGIN DO_NOT_ERASE_ME
</IfModule>
# END DO_NOT_ERASE_ME

This will hide their default entry, resolving the “white screen of death” you would normally see if using mod_auth_mellon.

Finally, in the Shibboleth options page, you wnat to change the “Session Indicator URL” and the Logout URL to the following:

https://YOUR_URL/mellon/login
https://YOUR_URL/mellon/logout?ReturnTo=https://YOUR_URL

…dropping the “s” from http if necessary.

Hope that helps somebody!