From 499b08d6b3237c92a047975a99ec6ca3c14a8b26 Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Fri, 28 Sep 2018 13:31:13 +0100 Subject: [PATCH] Bug 17776: (followup) Add note about NativeSPSpoofChecking --- C4/Auth_with_shibboleth.pm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/C4/Auth_with_shibboleth.pm b/C4/Auth_with_shibboleth.pm index aedd1a08a7..3b02153a1e 100644 --- a/C4/Auth_with_shibboleth.pm +++ b/C4/Auth_with_shibboleth.pm @@ -258,6 +258,8 @@ Or (for Plack running): ShibUseHeaders On +Please note, if you are running in the plack configuration you should consult https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSpoofChecking for security advice ragarding header spoof checking settings. + =item 5. Configure koha to listen for shibboleth environment variables. -- 2.18.0