Shibboleth client certificate

[Adam Jones]

After looking at the config for some time, I think I've figured it out.  Fixed it using Proxypass to pass requests to /idp to AJP.  

What's the usefulness of SOAP endpoints (or, "how does it work with IdP/SP communication")?
________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Wednesday, May 09, 2012 3:49 PM
To: Shib Users
Subject: Re: Shibboleth client certificate

On 5/9/12 3:34 PM, "Adam Jones" <amjones at skidmore.edu> wrote:

>I may have misunderstood the documentation - on what port should tomcat6
>be listening to for the login jsp page? I ask because, apache is already
>listening on 443 (should I turn it off and let tomcat take care of that,
>then?).

No browser should be using non-default ports. How you do it all is up to
you. If you want Apache, proxy 443 with AJP. If you don't, turn it off.

Personally I think it's confusing to have two web servers facing out, but
if you need Apache on 443 and prefer the advantage of avoiding the mod_ssl
hassles with client cert handling, there's an argument to doing that. And
there's the argument that if you don't need SOAP, don't offer it anyway.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net