Circular login issue.

[Cantor, Scott]

On 6/21/12 10:58 AM, "PARDEE, MARTIN  (MARTIN)" <mlp at research.att.com>
wrote:

>I recently added an SP to the same Linux box as the Idp so that I could
>understand the setup of an apache native SP.

This is a hard way to do it. It is very confusing to colocate things until
you have some experience with it.

> 
>This problem went away when I changed the ServerName line in my apache
>httpd.conf file from Œdt-safe1.client.research.att.com¹ to
>Œsafehost.research.att.com¹,  which is BOTH the name of my entity AND the
>name of a virtual host in this same apache httpd.conf file.

The choice of name is up to you, but it better match what's in the
metadata and what the client can see. The entityID has nothing to do with
it other than a name.

> 
> 
>It leaves me , however,  with a situation in which my IdP successfully
>authenticates my USER ID and then IMMEDITALY returns me to the login page
>requesting a new login ID.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping

-- Scott