Apache 2.4 producing 500 error when serving DirectoryIndex page from Shib SP protected areas

[Paul Beckett (ITCS)]

Scott,
I wanted to make sure the different behaviour I was getting now, was definitely not due to some unintended config difference, from having rebuilt my server. So I reinstalled the unpatched version of Shibboleth SP 2.5.0 against Apache 2.4.3, and with my current shibboleth and apache config and got the exact same behaviour I previously reported (calling /secure/index.html explicitly worked, calling directory /secure/ , relying on DirectoryIndex resulted in 500 error).

I've also installed Apache 2.2 to try and rule out anything about my Shibboleth config being part of the problem. In apache 2.2 things work as I would expect, /secure/ and /secure/index.html both get authenticated and then return content of index.html.

My naive interpretation of this (as someone who doesn't understand the internals of Apache, or write C) is that it must be something in the apache/mod_shib.cpp patch that is resulting in Apache not returning the content at all whether calling /secure/ or /secure/index.html. Is there any additional info / debugging that you would like me to run, that might help narrow down what is going on? 

When I applied the mod_shib.cpp patch, I've assumed that it doesn't rely on any other files being updated (other SVN revisions post 2.5.0 release to other files).

Thanks,
Paul


>-----Original Message-----
>From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
>On Behalf Of Cantor, Scott
>Sent: Thursday, October 04, 2012 3:26 AM
>To: Shib Users
>Subject: Re: Apache 2.4 producing 500 error when serving DirectoryIndex
>page from Shib SP protected areas
>
>On 10/3/12 12:04 PM, "Paul Beckett (ITCS)" <P.Beckett at uea.ac.uk> wrote:
>
>>The secure directory exists, and contains a single index.html (just for
>>testing at the moment).
>
>Alright, that's not really very different from what I tested, but just to be safe
>I'll find some time to test a static file in a subdirectory. I don't think that should
>be different from a file at the root of course.
>
>
>
>>The apache server config includes:
>>DirectoryIndex index.htm index.html
>>
>><Location /Shibboleth.sso>
>>SetHandler shib
>></Location>
>
>You certainly don't need that bit above, but it probably doesn't hurt anything.
>
>>Requests to /secure , /secure/ or /secure/index.html all result in this
>>same behaviour : browser appears to receive no response.
>
>I'll have to find time to test this on Linux I guess, in case it's behaving
>differently. On Windows, it definitely works in the mode you're testing it now.
>
>>unfortunately it was all in a virtual server running on the PC that
>>died
>>- so have had to recreate from scratch. Tomorrow I could rebuild
>>mod_shib without the mod_shib.cpp patch to verify I still get exactly
>>the same behaviour (500 error when relying on DirectoryIndex, but
>>otherwise get
>>page) as I did before if that would be useful?
>
>I doubt it, I wouldn't waste your time.
>
>But I probably won't have a chance to test this further until next week or so.
>
>-- Scott
>
>
>--
>To unsubscribe from this list send an email to users-
>unsubscribe at shibboleth.net