SP: Assertion contains an unacceptable AudienceRestriction.

[Peter Schober]

* Rainer Hoerbe <rainer at hoerbe.at> [2012-09-21 18:17]:
> Why should this be path-based? My ssl.conf contains:
> 
> <VirtualHost 46.252.26.58:443>
>  	ServerName samlecho2.hoerbe.at
> 	<Location /secure>
> 	  AuthType shibboleth
> 	  ShibRequestSetting applicationId default
> 	  ShibRequestSetting requireSession true
> 	  require valid-user
> 	</Location>
> </VirtualHost>
> <VirtualHost 46.252.26.58:443>
>  	ServerName pvpsaml2.portalverbund.at
>  	<Location /secure>
> 	  AuthType shibboleth
> 	  ShibRequestSetting applicationId pvpsaml2
> 	  ShibRequestSetting requireSession true
> 	  require valid-user
> 	</Location>
> </VirtualHost>

I'd move it up to the vhost (and only have the required session on a
path) and then each handlerURL will be in ^/Shibboleth.sso for that
vhost. Everything except /secure would be in the "default" applicaton
which has different ACS URLs (and a different EntityID).
-peter