New Shibboleth daemon on new server - user/wayf page just reloads over and over

[Cantor, Scott]

On 9/20/13 10:40 AM, "Kevin P. Foote" <kpfoote at iup.edu> wrote:

>I should add .. your MD registered with testshib has the following for
>DiscoverResponse, which you say works fine.

Only as an IdP, there's no discovery involved.

All of this is largely a sanity check. Even if the IC DS works (which is
now going to take all day to find out because the metadata needs to be
corrected), all that proves is that whatever's wrong is localized.

That's a 99% certainty anyway, because there's really nothing that could
be wrong with the SP. All it does is read query string parameters to
decide what to do and it's clearly not getting any. So something in that
web server is causing the module to see no query string when it finally
runs.

If the SAMLDS parameter on the way back in is set, the DS handler would
fail with an error. If the entityID parameter were set, it would dispatch
to that IdP and never fall into the DS handler. Both are set in the traces.

Neither expected outcome is happening, so pending the log trace I asked
for several times, I see no explanation here but that the Apache server is
misconfigured, perhaps with a rewrite rule, and is not passing through the
query string to /Shibboleth.sso/Login (or before, to /DS).

-- Scott