shibboleth - stopped working after package update

[Pedro Albuquerque]

Hi Aaron,

thanks for the response.

Yes, there is a shib.conf under /etc/httpd/conf.d
Shibboleth2.xml is configured to handlerSSL="false". The loadbalancer 
offloads the SSL, not the apache.

I can get the Metadata using the machine hostname in the URL. But if I 
use any other domain configured in the apache, it cannot find it.
I am running drupal and before the upgrade, everything was working. I 
should be able to download the Metadata going to 
http://site.com/Shibboleth.sso/Metadata. If I go to 
http://<hostname>/Shibboleth.sso/Metadata, I can download it.


On 02/07/2013 10:22, Aaron Howell wrote:
> I haven't experienced it after an update, but some ideas.
>
> Is it available over HTTPS?
>
> These may have been new or missing (which defaults to true) in the 
> shibboleth2.xml - depending on which version you were upgrading from - 
> which means it wont respond on http:
> handlerSSL="true"
>
> The config you specified does not have anything to do with the 
> Shibboleth.sso URL, is there a shib.conf where the module is enabled?
>
>
> Cheers
> Aaron
>
> On 02/07/2013, at 7:13 PM, Pedro Albuquerque <pedroalb at ebi.ac.uk 
> <mailto:pedroalb at ebi.ac.uk>> wrote:
>
>> Hi,
>>
>> Yesterday I updated the packages running on my redhat machine and 
>> shibboleth was one of them. It was updated to 
>> shibboleth-2.5.2-1.1.el6.x86_64.
>> When I go to http://site.com/Shibboleth.sso/Metadata, it does not 
>> find it.
>>
>> Shibboleth and Apache have been restarted.
>> There is nothing in the logs.
>>
>> apache conf file:
>>
>> <Directory "/var/www/html">
>>         AllowOverride none
>>         Include "/var/www/html/.htaccess"
>>
>>         Satisfy all
>>
>>         Order deny,allow
>>         Allow from all
>>
>>         AuthType shibboleth
>>         Require shibboleth
>>
>> </Directory>
>>
>>
>> Does anyone experienced this after the package update?
>>
>>
>>
>> Thanks.
>> Pedro.
>> --
>> To unsubscribe from this list send an email to 
>> users-unsubscribe at shibboleth.net 
>> <mailto:users-unsubscribe at shibboleth.net>
>
> /*
> Important Notice:* The contents of this email are intended solely for 
> the named addressee and are confidential; any unauthorised use, 
> reproduction or storage of the contents is expressly prohibited. If 
> you have received this email in error, please delete it and any 
> attachments immediately and advise the sender by return email or 
> telephone.
>
> Deakin University does not warrant that this email and any attachments 
> are error or virus free./
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130702/aaf93413/attachment.html