shibboleth - stopped working after package update

[Cantor, Scott]

> My question is: Why the use of Satisfy Any when the login handler is on
> /Shibboleth.sso/Login? My drupal site points its login handler to that location.
> If that Satisfy Any directive is there, it cannot authenticate.

As Peter said, that's not possible, or certainly not correct anyway. Handlers are never protected *by* the SP, they have to run. People were complaining that their root server configs were accidentally blocking access to them.

There is no package issue if a change exposes an incorrect configuration in the first place.

-- Scott