summaryrefslogtreecommitdiff
path: root/www/ap2-auth-mellon
AgeCommit message (Collapse)AuthorFilesLines
2010-05-31Update to 0.2.7. From the NEWS file:manu3-22/+6
Version 0.2.7 --------------------------------------------------------------------------- * Optionaly ave the remote IdP entityId in the environment * Shibboleth 2 interoperability Version 0.2.6 --------------------------------------------------------------------------- * Fix XSS/DOS vulnerability in repost handler.
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-2/+2
2010-01-04Installation doesn't work with destdir. Make sure to pull include/openssljoerg1-6/+7
into the include path. Mark as only for Apache 2.2.
2009-12-20Fix a XSS vulnerabilitymanu3-2/+25
2009-12-11Remove additions to CONFIGURE_ENV.obache1-4/+1
They are automatically handled automatically by pkgsrc with more sufficient variables.
2009-12-11apxs does not support DESTDIR installation.obache1-3/+1
2009-12-11Remove comments from url2pkg.obache1-3/+1
2009-11-16Update to mod_auth_mellon 0.2.5. From the NEWS file:manu2-6/+6
* Replay POST requests after been sent to the IdP * Fix HTTP response splitting vulnerability.
2009-08-27Remove empty line.wiz1-2/+1
2009-08-11Change since 0.2.4:manu2-6/+7
* Fix for downloads of files with Internet Explorer with SSL enabled. * Mark session as disabled as soon as logout starts, in case the IdP doesn't respond. * Bugfix for session lifetime. Take the session lifetime from the SessionNotOnOrAfter attribute if it is present.
2009-06-15Update to 0.2.2. From NEWS:manu3-56/+6
* Improve metadata autogeneration: cleanup certificate, allow Organizarion element data to be supplied from Apache configuration
2009-06-06Update to 0.2.1:manu4-122/+57
* Make SAML authentication assertion and Lasso session available in the environement. * Autogeneration of SP metadata. (Requires Lasso 2.2.2 or newer.) * Multiple IdP support, with discovery service. * Built in discovery service which tests the availability of each IdP, and uses the first available IdP. * Fix a mutex leak. * MellonSecureCookie option, which enables Secure + HttpOnly flags on session cookies. * Better handling of logout request when the user is already logged out.
2009-03-03Add missing version in package namesmanu1-2/+2
2009-03-02mod_auth_mellon is a authentication module for apache. It authenticatesmanu6-0/+169
the user against a SAML 2.0 IdP, and and grants access to directories depending on attributes received from the IdP.