# Shibboleth Apache Global configuration
UseCanonicalName On

<% unless @host.shib_prefix.nil? %>
ShibConfig <%= File.join(@host.shib_prefix, 'shibboleth2.xml') %>
<% end %>
  
LoadModule mod_shib /usr/lib64/shibboleth/mod_shib_22.so

<IfModule mod_alias.c>
  <Location /shibboleth-sp>
    Allow from all
  </Location>
  Alias /shibboleth-sp/main.css /usr/share/doc/shibboleth-2.4.3/main.css
  Alias /shibboleth-sp/logo.jpg /usr/share/doc/shibboleth-2.4.3/logo.jpg
</IfModule>

# Enable shibboleth for all vhosts, does NOT require auth anywhere
# just makes it possible.
# Specific auth requirements are make in the <RequestMap> in shibboleth2.xml
<Location />
  AuthType shibboleth
  Require shibboleth
</Location>