Understanding virtual hosts

[Jonathan Knight]

On 23/05/2012 14:54, Cantor, Scott wrote:
> On 5/23/12 9:01 AM, "Jonathan Knight"<j.knight at isc.keele.ac.uk>  wrote:
>>
>> I think what I want is a virtual host, so I've added the following into
>> the shibboleth2.xml file:
>
> If it's Apache, do not use the RequestMap. You don't need it. You also
> probably don't need to use an override.


Apache is present, but it's only used to proxy to the tomcat application 
except for one single page used to initiate shibboleth.  The distinction 
between the bbtest.vle.keele.ac.uk and students.keele.ac.uk hosts occurs 
within the tomcat application.

Essentially.....

ProxyPass / ajp://localhost:8009/ nocanon

<Location 
/webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin>
AuthType shibboleth
ShibRequestSetting requireSession 1
require valid-user
</Location>


The application decides what authentication is required and redirects to 
the shibboleth page if that's needed (it also does DB based 
authentication and LDAP authentication depending on the hostname it's 
called with).



> You probably shouldn't do anything, apart from supplying the additional
> ACS endpoints in the metadata, and making sure Apache generates redirects
> using the appropriate hostname in each case, which I suspect is the case.

I think apache is probably doing the right thing.  The SAML parameters 
seem to suggest that is the case.

Adding the additional ACS endpoints to the metadata sounds like a good 
approach.  Is there some documentation on how to attempt that using 
shibboleth2.xml or is it something that needs to be hand crafted?

Jon.