Understanding virtual hosts
Cantor, Scott
cantor.2 at osu.edu
Wed May 23 15:47:52 BST 2012
On 5/23/12 10:33 AM, "Jonathan Knight" <j.knight at isc.keele.ac.uk> wrote:
>
>Apache is present, but it's only used to proxy to the tomcat application
>except for one single page used to initiate shibboleth. The distinction
>between the bbtest.vle.keele.ac.uk and students.keele.ac.uk hosts occurs
>within the tomcat application.
>From the SP end, Apache is all that matters, the rest is out of its view.
I was just saying that with Apache, you don't need a RequestMap and it's a
bad idea in most cases to use one because it will leave holes any time you
do aliasing of site names.
>I think apache is probably doing the right thing. The SAML parameters
>seem to suggest that is the case.
Yes.
>Adding the additional ACS endpoints to the metadata sounds like a good
>approach. Is there some documentation on how to attempt that using
>shibboleth2.xml or is it something that needs to be hand crafted?
It has nothing to do with shibboleth2.xml.
Metadata is up to you and your federation or alternative trust management
strategy. It doesn't need to be hand crafted anymore than anything else
needs to be. It might be, or it might not be. That's not something I can
answer for your deployment.
-- Scott
More information about the users
mailing list