Looping issue where no cookies are being sent in the response

Cantor, Scott cantor.2 at osu.edu
Mon Nov 4 18:55:53 EST 2013


On 11/4/13, 6:48 PM, "Bradley Wagner" <bradley.wagner at hannonhill.com>
wrote:
>I just tried removing the:
>
><Location /Shibboleth.sso>
>  Require all granted
></Location>

>altogether and everything worked.

That's what I would expect.

>All URLs were protected by Shibboleth and proxied to my Tomcat app (once
>a valid Shibb session was established) *except* for /Shibboleth.sso/*
>even though I wasn't explicitly exposing those.
>
>Is the Apache module smart enough to know how to do this on its own? This
>is my entire working config at this point.

Yes. If a request comes in such that the "effective" handlerURL for it
matches the request itself, then the check_user hook bails and just runs
the handler directly. That's why I've never needed to specially handle it.

-- Scott




More information about the users mailing list