Apache 2.4.3 with Shibboleth 2.5.1 producing 500 error instead of providing DirectoryIndex page

[Paul Beckett (ITCS)]

I haven't tried the 2.5.1 release. But in case I didn't previously confirm this on the list, applying the patches mentioned in https://issues.shibboleth.net/jira/browse/SSPCPP-502 to http://shibboleth.net/downloads/service-provider/unreleased/shibboleth-sp-2.5.0-apache24fix.tar.gz (which contained a fix to the configure script), resulted in everything working as expected for me on my RHEL6 development server running Apache 2.4.3. The only time I now get a 500 error, is when I've forgotten to start the shib SP daemon.
Cheers,
Paul



>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>On Behalf Of Chris LeBlanc
>Sent: Tuesday, December 11, 2012 7:50 PM
>To: users at shibboleth.net
>Subject: Apache 2.4.3 with Shibboleth 2.5.1 producing 500 error instead of
>providing DirectoryIndex page
>
>Hello, this is a "repeat" of the error indicated by Paul Beckett with:
>     http://marc.info/?l=shibboleth-users&m=134789034725562
>
>This is on a Slackware 14.0 machine running Apache 2.4.3, using Shibboleth
>2.5.1.  Whenever I configure a URL using either the Directory or Location
>directive, or if I use a .htaccess file with the following settings:
>   AuthType shibboleth
>   ShibRequestSetting requireSession 0
>   ShibUseHeaders On
>   Require shibboleth
>the server responds with a 500 erro when the user tries to access any location
>without specifying a file.  Eg: if they go to http://webtest.ourschool.edu/,
>instead of receiving the index.php file, they receive the 500 error.
>
>This is accompanied by an entry in the error log of:
>     [day date time year] [mod_shib:error] [pid #:tid #] [client IP address:port]
>shib_base_check_authz found no per-request structure
>
>If I replace the "require shibboleth" with "require all granted", or if I add that
>entry before the shibboleth entry, then the index.php file is provided correctly,
>but there are no shibboleth headers provided then, even if the user is logged
>in via shibboleth already.
>
>My understanding was that this was a part of:
>     https://issues.shibboleth.net/jira/browse/SSPCPP-502
>which is supposed to be fixed as of the 2.5.1 release.  However, this appears to
>still be happening.
>
>Is there anything I am missing in the config, or do I need to submit a new ticket
>or re-open the existing ticket?
>
>Thanks,
>
>Chris LeBlanc
>Assistant Registrar for Technology
>University of Oregon
>--
>To unsubscribe from this list send an email to users-
>unsubscribe at shibboleth.net