Shibboleth SP in Ubuntu apache2 - permission denied protected directory

[Zico]

Oh yes, Peter. I forgot to mention... yes, I am configuring  Logical SP (
that /sample1 ).


On Sun, Jun 8, 2014 at 6:11 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Zico <mailzico at gmail.com> [2014-06-08 13:02]:
> > You don't have permission to access
> > /sample1/Shibboleth.sso/SAML2/POST on this server
>
> The Shibboleth SP's content handler (Shibboleth.sso) cannot and should
> not be part of the protected content itself, as that doesn't make any
> sense, of course.  But instead of fixing that problem via httpd
> directives (allowing all access to that REQUEST_URI) I'd ask why you
> even end up with such a URL?
> So even get a SAML IDP to try to post to that location you must have
> changed the SP's metadata to move all references to
> https://your.example.org/Shibboleth.sso/... to
> https://your.example.org/sample1/Shibboleth.sso/...
> What gave you the impression you had to do this?
>
> The only case one ever has to do something like this is if you need to
> use an ApplicationOverride in order create logically seperate
> ("virtual") SPs on the same vhost. That is a very uncommon requirement
> so unless you clearly state your use case I'd assume that this is not
> what you actually want.
>
> Short version: Undo all the changes you did to change the handlerURL
> (and in SAML metadata you gave toe IDP) and try again.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140608/46ae2512/attachment.html