Shibboleth SP on Apache HTTP behind SSL load balancer?

[Cantor, Scott]

On 10/6/15, 3:13 PM, "users on behalf of James W. Anderson" <users-bounces at shibboleth.net on behalf of jamesanderson at coca-cola.com> wrote:



>I’m trying to configure the Shibboleth service provider to run behind a load balancer that uses SSL on the frontend, but passes unencrypted HTTP to the web server, like this:
> 
>[Browser] –https:443 --> [LB] –http:80--> [SP | Apache]
> 
>If I set the attribute handlerSSL=”true” on the <Sessions> item (in shibboleth2.xml), Shibboleth expects the incoming request to Apache to use SSL over port 443; if I set handlerSSL=”false” Shibboleth seems to generate the wrong URLs to
> refer back to the site—it prefixes them with http: instead of https:
> 
>What am I missing here?

That setting has nothing to do with this use case (it's orthogonal). Virtualizing an Apache server is an Apache issue, not a Shibboleth issue. See the ServerName command.

-- Scott