IDP Requesting client Certificate

[Kobi Seviliya]

Thanks everyone for the fast and detailed responses, ill move SOAP
connector to a different port and see how it behaves .


On Tue, May 20, 2014 at 5:21 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 5/20/14, 3:09 PM, "Kobi Seviliya" <kobi at outbrain.com> wrote:
>
> >Jetty is listening on port 8443 and i use ipchaines to redirect port 443
> >to 8443 ...
>
> Then that's the problem.
>
> >am i missing something here ?
>
> You've configured the trust manager plugin designed to be used on port
> 8443 for SOAP traffic and it's now affecting requests from the browser.
>
> If you want to use ipchains like that instead of just doing setuid, then
> you should move the SOAP connector to 9443 or some other port, and leave
> 8443 unmolested by the plugin.
>
> Or just don't support back channel requests/profiles if you don't need
> them.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
 *Kobi Seviliya,* IT Manager

 *T: *073-2238947 *M: *052-6500978 *E: *kobi at outbrain.com

-- 
The above terms reflect a potential business arrangement, are provided solely 
as a basis for further discussion, and are not intended to be and do not 
constitute a legally binding obligation. No legally binding obligations will 
be created, implied, or inferred until an agreement in final form is executed 
in writing by all parties involved.

This email and any attachments hereto may be confidential or privileged. 
 If you received this communication by mistake, please don't forward it to 
anyone else, please erase all copies and attachments, and please let me 
know that it has gone to the wrong person. Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140520/dd5ab30f/attachment.html