

(If you have it disabled - which is not recommended - then this command will work.) This is because mod_cosign.so can not be written directly to /usr/libexec/apache2 due to System Integrity Protection being enabled.
#XCODE FOR MAC APACHE MAC OSX#
NOTE: On Mac OSX 10.11 and greater - "make install" will appear to fail. If you intend to set up a weblogin environment, you'll need to build the daemon and CGIs: Build All Weblogin Components (Optional)
#XCODE FOR MAC APACHE MAC OS X#
NOTE 3: Running "make" at this point will generate a lot of "deprecated" warning messages on Mac OS X Server 10.7 and later - these can be ignored when installing cosign 3.2.0 (as of August 2012) NOTE 2: For systems running Apache 2.4 (Mac OS X 10.10 and beyond) - you must modify a file *BEFORE* running "make".ġ) in your "cosign-" directory, go to filters/apache2 (not filters/apache!)Ģ) Edit mod_cosign.c to replace *TWO* instances of "remote_ip" with "client_ip":Ĭv = cosign_cookie_valid( cfg, cookie, &rekey, &si,Ĭv = cosign_cookie_valid( cfg, my_cookie, NULL, &si, Sudo ln -s XcodeDefault.xctoolchain OSX10.10.xctoolchain Sudo ln -s XcodeDefault.xctoolchain OSX.xctoolchain (REPLACE with your operating system version!) BEFORE running "make", you will need to do this:Ĭd /Applications/Xcode.app/Contents/Developer/Toolchains NOTE 1: FOR OSX SERVER: xCode has an issue where a compiler path is missing. If you are not running OSX Server, you just run: To install openssl and then link to the headers by running: If you choose this method, you can then run these commands AFTER you install homebrew: One of the easier ways to do this is to install "homebrew" from. NOTE: For 10.11 and up, the openssl headers are no longer part of Xcode, so you will need to manually install them first.

configure -enable-apache2=/usr/sbin/apxs -enable-krb -with-gss
#XCODE FOR MAC APACHE FOR MAC OS X#
NOTE: For Mac OS X 10.7 through 10.10, you can not build universal binaries, so the command would be: configure -enable-apache2=/usr/sbin/apxs -enable-universal-binaries -enable-krb -with-gss If building for Mac OS X Server, you'll probably want to add -enable-universal-binaries, which will give you four-architecture (i386, x86_64, ppc, and ppc64) binaries of the daemon, CGIs, and the Apache filters. If building for Apache2, use -enable-apache2=/path/to/apxs2. If building for Apache 1.x, use -enable-apache1=/path/to/apxs. In Terminal, decompress the archive and change to the Cosign source directory: Once Xcode has been installed and run (to agree to the licensing), then install the command line tools by running:ĭownload the latest release of Cosign from. Also, if you want to install all the parts without doing a lot of extra work, you will need to manually download and install the xCode command line tools from the Apple AppStore. NOTE: if you haven't installed Xcode previously, be sure to run Xcode so it installs the components and agree to the license before continuing. Recent Mac OS X releases include Apache2. These notes also assume you have Apache 1.x or Apache2 installed. Download them from Apple's developer site or the Mac App Store.

You will need to have the current Xcode Tools installed. For additional notes regarding an installation on Mac OS X Server, please see Leopard Server Install. This page will guide you through building and installing Cosign on Mac OS X. 2.5 Build All Weblogin Components (Optional).
