# this is just an extract of an Apache 1.3.x httpd.conf file with
# the special things required for SWITCHaai integration.

LoadModule shibrm_module /opt/shibboleth/libexec/mod_shibrm.so
LoadModule shire_module /opt/shibboleth/libexec/mod_shire.so

SHIREConfig /opt/shibboleth/etc/shibboleth/shibboleth.ini
SHIREURL /shibboleth/SHIRE

<Location /shibboleth/SHIRE>
  SetHandler shib-shire-post
</Location>

# some sample auhorization restrictions derived from the SWITCHaai demo server
#
<Location /restricted>
  AuthType shibboleth
  ShibExportAssertion On
  require uniqueID 3141592@domain.ch
</Location>

<Location /secure>
  AuthType shibboleth
  ShibExportAssertion On
  require valid-user
</Location>

<Location /staff>
  AuthType shibboleth
  ShibExportAssertion On
  require affiliation ~ ^staff$
</Location>

<Location /student>
  AuthType shibboleth
  ShibExportAssertion On
  require affiliation ~ ^student$
</Location>