application override not working on some clients

[Cantor, Scott]

On 6/6/14, 2:27 PM, "Archuleta, Marc" <archuleta.2 at osu.edu> wrote:

>When I removed "ShibRequestSetting applicationId default" from  the
>location element it broke.
>I was not able to get to the login screen on the www vhost.

I can't explain that.

>In the transaction.log I don't see any sessions created since this
>morning. Since I can't even get to the login screen on my phone I don't
>see anything appearing in the logs. I think the phone just hangs.

I think your Apache server is just not serving. I am not able to connect
to the vhost in question over https://, and if you expect your phone to
work, then they can't be firewalled off or anything (I just assumed this
was an intranet with no outside access). If these are supposed to be open
to world, or at least our network, I think you may have more fundamental
hosting issues to fix first. http:// works, but that's going to work for
the SP unless you need it to, which involves other changes.

>However, when I try to access the resource from my computer I do get to
>the login screen and I see this in shib.log:

That happens before login.

>The default also shows /Shibboleth.sso/SAML2/POST in the logs when being
>redirected to the login screen.

After maybe, but not before.

>The behavior on my phone and on the student Mac laptop that I observed
>seems to be more like hanging rather than looping.

I think so too, because I don't think it even connects. My browser
certainly doesn't.

>Can you recommend a good tool to profile what's happening on my android
>phone?

Nope.

>If not, what would you recommend I try on the student laptop?

Firefox and Live Headers generally. Simplest tools for the job. But a
failure to connect to the server is just that, it won't show up on any
trace. Helps to see the last Redirect from the server though.

If this is meant to be blocked by a firewall, my suggestion is that you
unblock it so I can actually see what it's doing.

-- Scott