multiple sp with same hostname

Nikola Garafolic ngarafol at srce.hr
Tue Oct 13 04:13:22 EDT 2015


Hi,

I have one virtualhost that uses shibboleth. I currently have it set to 
run only on http. Now I would like to use it on https and http 
simultaneously. So, I need http://domain.com and https://domain.com 
without http to https redirection. I am using apache and haproxy for 
loadbalancing.

For now in shibboleth2.xml I setup:

<Host name="domain.com" applicationId="domain">
             </Host>

and

<ApplicationOverride id="domain" entityID="http://domain.com/"/>

<ApplicationOverride id="domainssl" entityID="https://domain.com/"/>

And have two apache vhosts running on port 80 (since haproxy will do 
loadbalancing) with:

http vhost:

ServerName http://domain.com
...
ShibRequestSetting applicationId domain

and https vhost:

ServerName https://domain.com
...
ShibRequestSetting applicationId domainssl

Problem is that first login always goes to http instead of desired (even 
if https is used, it gets redirected to http). Later,     user can 
access https no problem.
Am I doing it right? Does anyone use similar scenario?

Shib version is: shibboleth-2.5.3-1.1.x86_64
Os is centos 6 x64

Regards,
Nikola


More information about the users mailing list