Shibboleth SP mod_shib module not handling Shibboleth.sso URLs and looping

[Cantor, Scott]

On 10/14/14, 11:25 AM, "Bradley Wagner" <bradley.wagner at hannonhill.com>
wrote:

>When I comment out the <Location> block, the POST request responds with
>the same 302 redirect but also a _shibsession_<hash> cookie so that
>subsequent GET /a-url-in-my-app is allowed because it passes the session
>cookie.
>
>Does this still point to the POST request not being properly handled or
>possibly something else? I would think that if it were not handled by
>Shibboleth it wouldn¹t try to forward me to my app because I wouldn¹t be
>authenticated.

I would assume that in both cases it should log the creation of the
session, in which case the problem is that Apache is doing something wrong
and overwiting the response headers it's trying to set.

>Thanks again for the help on this. It feels like something subtler than a
>library mismatch but perhaps not.

You cannot use packages on the wrong OS, period.

-- Scott