shibboleth-idp behind a load balancer?

[Gene Matthews]

Hi, 

I'm managing a shibboleth-idp that we have had in test and are now ready to move into production. The production environment has two shibboleth-idp servers behind it. They use LDAP as their back-end with LDAP replicating updates back and forth. I believe I have the ldap replication working ok and from within the environment I can get the status page ('ok' from https://myidpserver:8443/idp/profile/Status ) to return 'ok'. 

When I go to the https://loadbalancer-for-idp:8443/idp/profile/Status I land on the error-404.jsp page (invalid URL). I don't control the load balancer and am working to see if there is any logging going on there. I don't see anything in the idp-process.log when I do this. Should I see something in the idp-process.log? The http request is obviously getting through the load balancer or I would get the error-404.jsp page displayed. I've edited the jsp page to have the hostname displayed so I know which of the two idp servers is ending up with the request (always idp1 so far). 

Has anyone done anything like this? Any reason shibboleth-idp couldn't operate in an environment like this? Should I see something in the log? 

Thanks for any insight. 

Thanks, 

Gene 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131211/81007b53/attachment.html