application override not working on some clients

[Archuleta, Marc]

Wow, thank you!!!
You solved the problem. We had to open port 443.
I should have known it would be something so simple.

Thanks again!
Marc

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, June 06, 2014 2:46 PM
To: Shib Users
Subject: Re: application override not working on some clients

On 6/6/14, 2:27 PM, "Archuleta, Marc" <archuleta.2 at osu.edu> wrote:

>When I removed "ShibRequestSetting applicationId default" from  the 
>location element it broke.
>I was not able to get to the login screen on the www vhost.

I can't explain that.

>In the transaction.log I don't see any sessions created since this 
>morning. Since I can't even get to the login screen on my phone I don't 
>see anything appearing in the logs. I think the phone just hangs.

I think your Apache server is just not serving. I am not able to connect to the vhost in question over https://, and if you expect your phone to work, then they can't be firewalled off or anything (I just assumed this was an intranet with no outside access). If these are supposed to be open to world, or at least our network, I think you may have more fundamental hosting issues to fix first. http:// works, but that's going to work for the SP unless you need it to, which involves other changes.

>However, when I try to access the resource from my computer I do get to 
>the login screen and I see this in shib.log:

That happens before login.

>The default also shows /Shibboleth.sso/SAML2/POST in the logs when 
>being redirected to the login screen.

After maybe, but not before.

>The behavior on my phone and on the student Mac laptop that I observed 
>seems to be more like hanging rather than looping.

I think so too, because I don't think it even connects. My browser certainly doesn't.

>Can you recommend a good tool to profile what's happening on my android 
>phone?

Nope.

>If not, what would you recommend I try on the student laptop?

Firefox and Live Headers generally. Simplest tools for the job. But a failure to connect to the server is just that, it won't show up on any trace. Helps to see the last Redirect from the server though.

If this is meant to be blocked by a firewall, my suggestion is that you unblock it so I can actually see what it's doing.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net