[SOLVED] Re: Apache ServerName, handlerURL, and Reverse Proxy

[Martin Haase]

Am 14.01.2013 16:44, schrieb Cantor, Scott:
> On 1/14/13 10:31 AM, "Martin Haase" <Martin.Haase at DAASI.de> wrote:
>
>> We noticed the following during logout: when the notified application
>> (moodle) generated the front channel redirect (after app-logout) back to
>> the SP's logout handler (at the proxy's address), the client saw a
>> redirect to the backend's address. Could well be an Apache bug, I do not
>> suspect this to be an SP bug.
> If you have a Notify hook configured, the URL it gives to the hook to tell
> it where to come back to 
That URL was correct, the proxy's, we dumped it in moodle before issuing
the redirect. As I said, it was not the SP at fault, but somehow the
Apache reverse proxy made it wrong to the client. Interestingly it only
showed up when we did the logout, the rest worked.

Thanks,
Martin

> is generated the same way as any other
> self-referential handler location. It should be the same as the ACS
> location it generates to the IdP and so forth.
>
> The Hostname there would come from ServerName, unless canonical is off, in
> which case it comes from the Host header of the client (or proxy in this
> case).
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2345 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20130114/ada07899/attachment.bin