shibboleth - stopped working after package update

[Pedro Albuquerque]

Thanks Scott.

The /etc/httpd/conf.d/shib.conf has been changed with the upgrade.
This block has been added with the update:

#
# Ensures handler will be accessible.
#
<Location /Shibboleth.sso>
   Satisfy Any
   Allow from all
</Location>

I just simply removed it and worked.
My question is: Why the use of Satisfy Any when the login handler is on 
/Shibboleth.sso/Login? My drupal site points its login handler to that 
location. If that Satisfy Any directive is there, it cannot authenticate.

Thanks,
Pedro.


On 02/07/2013 16:55, Cantor, Scott wrote:
>> I believe there are differences (even minor ones) that would affect
>> this. If I downgrade to 2.5.1-1.2 it works without changing any
>> configuration files. (I only keep the /etc/shibboleth/shibboleth2.xml
>> across versions).
>>      
> The only thing I can think of is that you didn't modify shib.conf at all, in which case the upgrade would change that file, specifically adding a Location block for /Shibboleth.sso with commands to guarantee that nothing blocks access to the handlers inadvertently. That's the area to check, and I would simply remove the modification and see if that matters. I have no idea why or how it would.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130703/2c158502/attachment.html