Circular login issue.

[PARDEE, MARTIN (MARTIN)]

Scott,



I am doing things this way (probably obvious) because these are resources I have complete control over in my work environment.  If you think that setting up my apache SP on another box will help remove this issue,  I'll go scrounge up another box,  or bring in my laptop.  In the meantime,  assuming that I am stuck with this configuration for a day or two,  do you think that (I just found this on the troubleshooting page) that the item on "HTTP POST data is lost when Shibboleth session expired or does not exist yet" would help me at all?


Martin


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Thursday, June 21, 2012 11:11 AM
To: Shib Users
Subject: Re: Circular login issue.

On 6/21/12 10:58 AM, "PARDEE, MARTIN  (MARTIN)" <mlp at research.att.com>
wrote:

>I recently added an SP to the same Linux box as the Idp so that I could
>understand the setup of an apache native SP.

This is a hard way to do it. It is very confusing to colocate things until
you have some experience with it.

> 
>This problem went away when I changed the ServerName line in my apache
>httpd.conf file from Œdt-safe1.client.research.att.com¹ to
>Œsafehost.research.att.com¹,  which is BOTH the name of my entity AND the
>name of a virtual host in this same apache httpd.conf file.

The choice of name is up to you, but it better match what's in the
metadata and what the client can see. The entityID has nothing to do with
it other than a name.

> 
> 
>It leaves me , however,  with a situation in which my IdP successfully
>authenticates my USER ID and then IMMEDITALY returns me to the login page
>requesting a new login ID.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net