On 1/17/12 1:53 PM, "Scott Koranda" <skoranda at gmail.com> wrote: > ><Directory /path/to/some/cgi/scripts> > AuthType shibboleth > Require shibboleth > <Limit POST> > AuthType shibboleth > ShibRequestSetting requireSession 1 Obvious thing to verify, take that out and make sure it doesn't still do the redirect. -- Scott