Tomcat Config Question

[Peter Schober]

* Christopher Bland <chris at fdu.edu> [2012-03-12 18:04]:
>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare

That's the official documentation of the Shibboleth project, yes.

> https://spaces.internet2.edu/display/ShibInstallFest/IdP+Step-by-Step

That's not the official documentation of the Shibboleth project.

> I am unsure of what tomcat6-dta-ssl-1.0.0.jar does and the that mean
> that I don't need the extra parameters?

"dta" is short for "delegate to application" and refers to the
evaluation of client certificates during SOAP requests -- so has
nothing to do with your login context problem (as this port and
connector is not for web browser/end user access).

> Also I am using an Apache front-end with mod_proxy configured as
> ProxyPass /idp ajp://localhost:8009/idp.  Are ProxyPassReverse or
> ProxyPassReverseCookiePath required as part of setup also?

No. But if you front Tomcat with httpd anyway then there's no need for
"dta" in Tomcat at all. Just proxy both kind of requests via httpd and
have httpd listen on both tcp 443 and tcp 8443. If you're lost with
httpd config better stick to the documentation and use Tomcat solo,
-peter