These instructions relate to using the Apache Moonshot module package. To build the module manually, see the Building Apache HTTPD module on RHEL/CentOS/SL 6 manually page.
All of the instructions below assume that you have root access, and will work as the root user (either directly or using sudo).
Turn off SELinux
Currently, Moonshot will not work while SELinux is in enforcing mode. Until we resolve this, simply turn SELinux to permissive mode. This can be done temporarily (i.e., on reboot it will be turned back on), or permanently (the change will persist).
The following command will turn Enforcing mode off:
Add the Moonshot libraries
If you have not already done so, you first need to follow the instructions on how to install the Moonshot Libraries on RHEL/CentOS/SL 6.
Protecting a location with Moonshot
To protect a particular location on your Apache server, you must configure it with an AuthType of "Negotiate".
Web services often rely on the
Accessing Moonshot attributes
The Moonshot module can use either the Shibboleth attribute resolver library to map RADIUS and SAML attributes to internal Shibboleth attributes, and then to environment variables, or use its own internal JSON attribute resolver to map either RADIUS attributes or SAML attributes to environment variables. Read more at Configure a Linux Server's Attribute Resolution about how to configure Shibboleth or the internal JSON attribute resolvers.
We are working on enhancements that allow the Moonshot module to expose attributes in the same way as the RedHat module.
HTTPS Internet Explorer compatibility
For updated best practice with Internet Explorer connections, you should also read Microsoft's HTTPS and Keep-Alive Connections article.