Shibboleth SP - RequestMap requireSession false for query string value

[Cantor, Scott]

On 2/14/14, 4:20 AM, "Ulrich Leodolter" <ulrich.leodolter at obvsg.at> wrote:
>
><RequestMap applicationId="default">

You should not be mixing the RequestMap with Apache settings.

>Additionally i configured Apache as documented at
>https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig#
>NativeSPApacheConfig-EnablingtheModuleforAuthentication

It's not "additionally", pick one, not both.

><Location /shib>
>  AuthType shibboleth
>  ShibRequestSetting requireSession 1
>  require valid-user
>  Options ExecCGI FollowSymlinks
>  ForceType application/x-httpd-cgi
></Location>
><Location "/shib/TST/logout">
>  AuthType shibboleth
>  ShibRequestSetting requireSession false
>  require shibboleth
></Location>

Nor am I sure you can get a reasonable outcome by mixing Location blocks
that overlap, but that's an Apache question.

>But until now it does not work as i would expect,  accessing
>https://www.example.org/shib/TST/logout without shib session always
>redirects to testidp login.

There's nobody that can debug it but you outside of an obvious syntax
mistake. You'd have to figure out why your settings aren't applicable to
the request. native logger on DEBUG can sometimes help.

-- Scott