Page Comparison

...

Code Block

	xml
	xml
title	Allow marketing and management staff, but not staff from engineering

<Host name="www.example.org" authType="shibboleth" requireSession="true">
    <Path name="topsecret">
        <AccessControl>
            <AND>
                <Rule require="employeeType">Staff</Rule>
                <OR>
                    <Rule require="ou">Marketing</Rule>
                    <Rule require="ou">Management</Rule>
                </OR>
                <NOT>
                    <Rule require="ou">Engineering</Rule>
                </NOT>
            </AND>
        </AccessControl>
    </Path>
</Host>

Code Block

	xml
	xml
title	Protect all content on a host


<Host name="www.example.org" authType="shibboleth" requireSession="true" />

Code Block

	xml
	xml
title	Protect a single directory on a host


<Host name="www.example.org" authType="shibboleth" requireSession="true">
    <Path name="private-stuff" />
</Host>

Apache-based access control

...

Code Block

title	Let in anyone from an IdP I trust

<Location /notverysecure/>
   AuthType shibboleth
   ShibRequireSession On
   require valid-user 
</Location>

Code Block

title	Anyone with a .org email by regex

<Location /orgpeople/>
   AuthType shibboleth
   ShibRequireSession On
   require mail ~ ^.*@.*.org$
</Location>

Versions Compared

Old Version 3

New Version 4

Key

Apache-based access control