Shibboleth SP in Ubuntu apache2 - permission denied protected directory
Peter Schober
peter.schober at univie.ac.at
Sun Jun 8 07:11:06 EDT 2014
* Zico <mailzico at gmail.com> [2014-06-08 13:02]:
> You don't have permission to access
> /sample1/Shibboleth.sso/SAML2/POST on this server
The Shibboleth SP's content handler (Shibboleth.sso) cannot and should
not be part of the protected content itself, as that doesn't make any
sense, of course. But instead of fixing that problem via httpd
directives (allowing all access to that REQUEST_URI) I'd ask why you
even end up with such a URL?
So even get a SAML IDP to try to post to that location you must have
changed the SP's metadata to move all references to
https://your.example.org/Shibboleth.sso/... to
https://your.example.org/sample1/Shibboleth.sso/...
What gave you the impression you had to do this?
The only case one ever has to do something like this is if you need to
use an ApplicationOverride in order create logically seperate
("virtual") SPs on the same vhost. That is a very uncommon requirement
so unless you clearly state your use case I'd assume that this is not
what you actually want.
Short version: Undo all the changes you did to change the handlerURL
(and in SAML metadata you gave toe IDP) and try again.
-peter
More information about the users
mailing list