configuring SP and applications under paths

[Peter Schober]

* Pedro Albuquerque <pedroalb at ebi.ac.uk> [2012-09-26 12:41]:
> We run Drupal websites on virtual hosts. With the Drupal shibboleth
> login module, I was able to set for each site and its virtual host
> the shibboleth login. They are sites like: www.site1.com,
> www.site2.com.
> However, to login into sites like: www.domain.com/site1 or
> www.domain.com/path/site2, I cannot make it work. I want to be
> forward to the IdP login page when I hit these paths.

Still lots of guesswork involved, but I'll take a shot.

Your Drupal is probably set up with "lazy sessions", i.e. the
establishment of a session (where and when the subject is asked to log
in) is handled by Drupal, more specificly the Drupal Shibboleth plugin
from our friends at NIIF/eduid.hu.

Other resources on that same server either need to do the same from
within the resource/application (initate a session via the documented
means) or configure "active" protection, as mentioned in the
documentation and also by Yannick in this thread.

See "Enabling the Module for Authentication" at
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig

> Is there anything to be configured in the /etc/shibboleth2.xml
> differently than the "usual" sites?

No, With Apache httpd you best do everything in httpd configs, as
mentioned in the Shibboleth documentation in several places.
-peter