lighttpd-fastcgi SP support/status

Matthew Dunham matthew.dunham at oist.ucsb.edu
Wed Dec 14 21:50:15 GMT 2011


> On Dec 13, 2011, at 6:04 PM, "Matthew Dunham" <matthew.dunham at oist.ucsb.edu> wrote:
>  
> I'm running a recent (1.4.29 lighttpd), on which the noted patches install cleanly and the config looks like what's been documented. The shib responder does seem to work as advertised, but I can't get the authorizer to seemingly do any authorization. Every attempt to GET a url behind the authorizer returns a 200 success, despite the debug log showing lighttpd handing the request off to the authorizer socket.
> 
> What does the native.log show on DEBUG?
> 
Nothing exceptional (to my eyes):

> 2011-12-14 13:35:39 DEBUG Shibboleth.FastCGI FastCGI shibauthorizer: mapped https://.ucsb.edu/shibboleth-sp/test.html to default
> 2011-12-14 13:35:39 DEBUG Shibboleth.FastCGI FastCGI shibauthorizer: shib: doAuthentication handled the request


This is a fresh-out-of-the-box 2.4.3 build with the only changes from stock config being a replacement of shibboleth2.xml from testshib and cranking the logs up to DEBUG.

-- 
||||||  Matthew E. Dunham
||||  Office of Information Systems & Technology
||||||  UC Santa Barbara
||||||||| 805 451 5814

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111214/74eb0b2b/attachment.html 


More information about the users mailing list