Remote IdP not responding?

[Roger Jagoda]

Chris et al,

Oh, so close.

This is what we did:

<Location /secure/protected.php>
   AuthType shibboleth
   ShibRequestSetting entityID shibboleth.testdb.idp2.edu
   ShibRequireSession On
   require valid-user
   ShibUseHeaders On
</Location>

This is the error (from native.log):

2013-07-03 16:55:24 ERROR Shibboleth.Apache [2092] shib_check_user: No
default session initiator found, check configuration.

I  know we're on the right track. Do we need to quote the
ShibRequestSetting arguments?

--RJ
====================================

Roger Jagoda
rberryj3 at gmail.com
==============================================


On Wed, Jul 3, 2013 at 12:32 PM, Christopher Bongaarts <cab at umn.edu> wrote:
> On 7/1/2013 7:10 PM, Roger Jagoda wrote:
>> The only thing remaining is the Session initiation. We protect a page
>> on our side (SP) and trigger the Shibboleth session with the usual
>> vhost configuration:
>>
>> <Location /secure/protected.php>
>>     AuthType shibboleth
>>     ShibRequireSession On
>>     require valid-user
>>     ShibUseHeaders On
>> </Location>
>>
>>
>> What is the best way of forcing the redirection to the appropriate
>> URL.
>
> Apologies if this was already answered in a disconnected part of the
> thread....
>
> Add this line to your <Location> block:
>
> ShibRequestSetting entityID https://shibboleth.testdb.idp2.edu
>
> The SP will generate the necessary redirects and SAML requests for you.
>
> References:
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net