Looping issue where no cookies are being sent in the response

[Bradley Wagner]

Gotcha. That makes sense. Thanks much!

I guess I was thrown off by the fact that that block existed in the
apache22.config example config that comes with Shibboleth.

#
# Ensures handler will be accessible.
#
<Location /Shibboleth.sso>
  Satisfy Any
  Allow from all
</Location>

Do you think that's just an error or is that required when you start
protecting resources that are not at the root as they do in that example
config:

#
# Configure the module for content.
#
# You MUST enable AuthType shibboleth for the module to process
# any requests, and there MUST be a require command as well. To
# enable Shibboleth but not specify any session/access requirements
# use "require shibboleth".
#
<Location /secure>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  require valid-user
</Location>


On Mon, Nov 4, 2013 at 6:55 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 11/4/13, 6:48 PM, "Bradley Wagner" <bradley.wagner at hannonhill.com>
> wrote:
> >I just tried removing the:
> >
> ><Location /Shibboleth.sso>
> >  Require all granted
> ></Location>
>
> >altogether and everything worked.
>
> That's what I would expect.
>
> >All URLs were protected by Shibboleth and proxied to my Tomcat app (once
> >a valid Shibb session was established) *except* for /Shibboleth.sso/*
> >even though I wasn't explicitly exposing those.
> >
> >Is the Apache module smart enough to know how to do this on its own? This
> >is my entire working config at this point.
>
> Yes. If a request comes in such that the "effective" handlerURL for it
> matches the request itself, then the check_user hook bails and just runs
> the handler directly. That's why I've never needed to specially handle it.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131104/50b73167/attachment-0001.html