SP configuration issue

[Robert Fidler]

Hello,

I am trying to configure an SP that is not off the root of the host, but I
can't seem to get /Shibboleth.sso to load.

I am trying to protect https://app.host.com/sub  and have a load balancer
that is directing traffic for https://app.host.com/sub to a different
server then where app.host.com is getting served from.

When I do wget for the metadata via localhost on the terminal I am able to
grab the metadata just fine. Although in the metadata is listing all the
locations as https://app.host.com/Shibboleth.sso/ not
https://app.host.com/app/Shibboleth.sso/

Thank you for any help you can give.
Rob 



<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    clockSkew="180">

    <RequestMapper type="Native">
        <RequestMap applicationId="default">

            <Host name="app.host.com">
                <Path name="sub"
                      applicationId="sub-app"
                      authType="shibboleth"
                      requireSession="true">
                 </Path>
			</Host>
        
        </RequestMap>
    </RequestMapper>

    <ApplicationDefaults entityID="https://app.host.com/sub/shibboleth"
		 REMOTE_USER="eppn persistent-id targeted-id">


        <Sessions lifetime="28800" timeout="3600" checkAddress="false"
			relayState="ss:mem" handlerSSL="false">

		<SSO entityID="https://login.host.com/idp/shibboleth"
			 discoveryProtocol="SAMLDS"
discoveryURL="https://ds.example.org/DS/WAYF">
			SAML2 SAML1
		</SSO>

            <Logout>SAML2 Local</Logout>
            
            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>

            <Handler type="Status" Location="/Status" acl="127.0.0.1"/>

            <Handler type="Session" Location="/Session"
showAttributeValues="false"/>

            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
            
        </Sessions>

        <Errors supportContact="root at localhost"
            logoLocation="/shibboleth-sp/logo.jpg"
            styleSheet="/shibboleth-sp/main.css"/>

		<MetadataProvider type="XML"
			uri="https://login.host.com/idp/profile/Metadata/SAML"
			backingFilePath="/opt/shibboleth-sp/etc/shibboleth/login-metadata.xml"
			reloadInterval="120">
			<TransportOption provider="CURL" option="32">3</TransportOption>
        </MetadataProvider>


        <AttributeExtractor type="XML" validate="true"
path="attribute-map.xml"/>
        
        <AttributeResolver type="Query" subjectMatch="true"/>

		<ApplicationOverride id="sub-app"
entityID="https://app.host.com/sub/shibboleth"
			homeURL="https://app.host.com/sub/" >
			  <Sessions handlerURL="/sub/Shibboleth.sso"
						handlerSSL="true"
						cookieProps="; path=/sub/; secure; HttpOnly"
						checkAddress="false"
						lifetime="28800" timeout="3600" />
				<AttributeExtractor type="XML"
					file="AttributeRelease/sub-attribute-map.xml"/>
		</ApplicationOverride>

        <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>

        <CredentialResolver type="File" key="sp-key.pem"
certificate="sp-cert.pem"/>

    </ApplicationDefaults>
    
    <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>

    <ProtocolProvider type="XML" validate="true" reloadChanges="false"
		path="protocols.xml"/>

</SPConfig>