Configure Shibboleth-SP-2.3.1 with DS-1.1.3.

[Cantor, Scott]

> The same SP 2.3.1 works with out any issues with idp-2.1.5, with out DS is
> picture.

Default use might never hit /Shibboleth.sso/Login with active session protection. If you can access that URL directly, then there's no reason it would start returning a 404 because you add the DS into the mix.

Or perhaps there's  something off about the return URL it's generating to the DS to pass control back to, and I didn't spot it.
 
> Platform information:
> SP 2.3.1 on Apache/2.2.14 (Unix)  with Red Hat Enterprise Linux Server
> release 5.3

Then you'd better upgrade because your system is completely open to a signature attack.

-- Scott