Shibboleth SP test KO : Don't reach testshib.org authentification

[Alexandre Lefevre]

Hi Peter Kevin and Paul,

Thanks for answer me.

Paul you are right, my apache regex was not good. I now join the IDP.
After correcting a mistake, all works.

Peter, thanks for warning about my rewrite rules i will study this.

Regards,
Alexandre Lefèvre 





Le 03/07/2015 08:58, « users on behalf of Peter Schober »
<users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> a
écrit :

>* Alexandre Lefevre <alexandre.lefevre at pentila.com> [2015-07-03 08:18]:
>> Unfortunately, the test don¹t work. When I join the URL
>>myhost.org/secure
>> i¹m never redirect.
>
>There's a section in the wiki on that, IIRC ("doesn't protect" or
>"doesn't redirect", something like that), look in the Troubleshooting
>section.
>Your own config doesn't enforce active protection, so accessing any of
>your own resoures won't trigger that, which is likely the issue here.
>
>>         RewriteEngine On
>> 
>>         RewriteCond %{HTTP_HOST} !^lea-preprod\.hautenormandie\. [NC]
>> 
>>         RewriteRule ^(.*)$ https://lea-preprod.hautenormandie.fr/$1
>>[L,R=301]
>
>Not the issue you're currently having but you'll certainly need to
>make an exception above for ^/Shibboleth\.sso/ otherwise the HTTP POST
>with the SAML response would possibly never arrive at the Shib SP's
>content handler.
>-peter
>-- 
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>