Shibboleth.sso not replying on SP in 2.3.1

[Ken Demarest]

I did the experiment and it is confirmed:

LoadModule mod_shib ...

MUST appear before any other LoadModule that captures requests (including
mod_passenger, and I suspect mod_php, etc)  or it will NOT capture
/Shibboleth.sso/ interactions.

Thanks again for the help, and please do whatever you can to help spread
the word.

Implementing Shibboleth just shortened my life by a year through increased
stress.

Ken


On Fri, Oct 5, 2012 at 5:39 PM, Ken Demarest <ken.demarest at gmail.com> wrote:

> Robert, you are my hero.
>
> I can't tell you how many hours of my life I'll never get back over this
> problem.
>
> It solved it, but it seems like a bit of a hack.  Why should it work
> sometimes, and not others?
>
> Perhaps it is the module load order, and mod_passenger is "getting in
> line" before mod_shib.
>
> I'm going to find out.
>
> Ken
>
> On Fri, Oct 5, 2012 at 1:45 PM, Robert A Basch <rbasch at mit.edu> wrote:
>
>> We had an SP with a similar issue a while back, and the solution was to
>> add the
>> following to the Apache config:
>>
>> <Location /Shibboleth.sso>
>>   PassengerEnabled off
>> </Location>
>>
>> Bob
>>
>>
>> On Oct 5, 2012, at 2:30 PM, Peter Schober wrote:
>>
>> > * Ken Demarest <ken.demarest at gmail.com> [2012-10-05 18:24]:
>> >> it appears that mod_shib is not intercepting the url, and I'm passed
>> >> through to my (Rails Passenger) application, which of course
>> >> responds that it can't find the file.
>> >
>> > Then stop your mod_rails from also eating ^/Shibboleth.sso
>> >
>> > With some configurations in the past I had to set someting like
>> > <Location "/Shibboleth.sso">
>> >  SetHandler shib-handler
>> > </Location>
>> > in order to reclaim the request uri from some other handler possibly
>> > set to <Location "/"> SetHandler foobar etc.
>> > -peter
>> > --
>> > To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
>
> --
> ____________________________________________________________
> ______________________
> *Ken Demarest *
> Founder and President
> *JEESTY ENDEAVOR  [ j. ]*
> ken.demarest at gmail.com
> 415.342.9731
> Austin, Texas ▪ United States
>
> __________________________________________________________________________________
>
>


-- 
____________________________________________________________
______________________
*Ken Demarest *
Founder and President
*JEESTY ENDEAVOR  [ j. ]*
ken.demarest at gmail.com
415.342.9731
Austin, Texas ▪ United States
__________________________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121005/f35c6725/attachment.html