AssertionConsumerServiceURL with explicit port number

[Wei Dai]

Thanks for your quick response Scott. I will check further at the Apache and load balancer configuration. The reason I thought we could configure SP to get around the issue is because both the SP metadata file and the AuthnRequest are generated by the SP, but for some reason one includes the port number and the other doesn't. Also, we are not offloading SSL for now and may do it later. 

Thanks again!

Wei

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, May 01, 2013 9:18 PM
To: Shib Users
Subject: Re: AssertionConsumerServiceURL with explicit port number

On 5/1/13 9:06 PM, "Wei Dai" <Wei.Dai at exlibrisgroup.com> wrote:

>This doesn't work with the IdPs. How can we remove the port number from 
>the AuthnRequest? I checked the Apache and SP configurations, but 
>didn't find a way to do it.

Nevertheless your web server is misconfigured. If it's including that port, it (Apache) thinks the protocol is http, not https. I don't know why it's generating an https:// location, but whatever's going on, Apache is misreporting things.

>Also, we are using a load balancer in front of two application servers 
>where the SPs are installed.

And that's not properly reflected somewhere in the Apache configuration.
I'm sure you're offloading SSL. However you managed to get it to generate https:// locations, that is hiding the fact that the server still thinks it's using http.

Shibboleth is not involved in any way.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net