[SOLVED] Re: Apache ServerName, handlerURL, and Reverse Proxy

[Martin Haase]

Hi Scott,

Am 14.01.2013 16:14, schrieb Cantor, Scott:
>> Additionally we added the option
>> "ProxyPreserveHost On" to the Apache reverse proxy in order for
>> front-channel logout to work. The latter option is not described on
>> https://wiki.shibboleth.net/confluence/display/SHIB2/SPReverseProxy, and
>> I could add it - do you feel that makes sense?
> I guess it's necessary for name-based vhosting on the back-end, but I
yeah, the Apache docs say so
> don't think it's necessary in general, and I don't see what it has to do
> with logout. 
We noticed the following during logout: when the notified application
(moodle) generated the front channel redirect (after app-logout) back to
the SP's logout handler (at the proxy's address), the client saw a
redirect to the backend's address. Could well be an Apache bug, I do not
suspect this to be an SP bug.

> I am generally just against trying to document Apache here. I
> would prefer that whatever is added is generic and speak to the concepts,
> not the specifics. I wouldn't have done that page that way to begin with
> (too many specific commands that assume one way of doing things).
ACK.

Regards,
Martin
> I think that page has other issues, for example setting handlerSSL to
> false. That shouldn't be needed if ServerName has the scheme set.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2345 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20130114/5df6d869/attachment.bin