AccessControl behaviour

[Cantor, Scott]

On 10/12/15, 11:15 AM, "users on behalf of romain.dauby at orange.com" <users-bounces at shibboleth.net on behalf of romain.dauby at orange.com> wrote:

>About the path
>http://application.dev/img/favicon.ico <http://application.dev/img/favicon.ico>, the browser is not redirected to login page (behaviour OK) : we have an error 500. We suppose that SP checks the AccessControl rules even if the requireSession attribute is set to false. This behaviour seems strange.

It's running as designed.

if this is Apache, there's no reason to do be using the RequestMap at all, and that solves your problem.

>Do you have a solution for not checking this path ?

I think you could redefine the AccessControl rule with a dummy rule that didn't block anything.

-- Scott