-
Notifications
You must be signed in to change notification settings - Fork 27
Drupal
David Beitey edited this page May 11, 2016
·
1 revision
Drupal is content management software. It's used to make many of the websites and applications you use every day. Drupal has great standard features, like easy content authoring, reliable performance, and excellent security. But what sets it apart is its flexibility; modularity is one of its core principles. Its tools help you build the versatile, structured content that dynamic web experiences need.
Note this requires nginx-http-shibboleth 2.0 or above to avoid header spoofing.
- Configure PHP to operate using FastCGI (php-fpm)
- Shibboleth module for Drupal: https://www.drupal.org/project/shib_auth
- Configure nginx to host PHP via FastCGI
- Configure Shibboleth attribute passing as FastCGI parameters
- Configure module with relevant attribute settings from
$_SERVER
: https://wiki.aai.niif.hu/DrupalShibbolethReadmeDev#Attribute_settings
location / {
shib_request /shibauthorizer;
shib_request_set $shib_commonname $upstream_http_variable_commonname;
shib_request_set $shib_email $upstream_http_variable_email;
shib_request_set $shib_remote_user $upstream_http_variable_remote_user;
fastcgi_param COMMONNAME $shib_commonname;
fastcgi_param EMAIL $shib_email;
fastcgi_param REMOTE_USER $shib_remote_user;
include fastcgi_params;
# Other necessary Drupal configuration
fastcgi_pass unix:/var/run/php5-fpm.sock;
}
// Use only for testing receiving environment parameters
// With successful Shibboleth auth, COMMONNAME, EMAIL and REMOTE_USER will be present
<?php var_export($_SERVER)?>
See nginx documentation on PHP FastCGI: https://www.nginx.com/resources/wiki/start/topics/examples/phpfcgi/.