ACS url when running daemon in linux sockets?
Br LRd
blasterradius at gmail.com
Wed Dec 28 05:02:37 EST 2016
Average use case: You use Apache + modshib, depending on apache and shib
settings your URL to stuff like login etc would be something like '
http://localhost/Shibboleth.sso/<handler>'.
What I'm doing: Running only shibd daemon on my machine, start
shibresponder binary listening on a socket, for example with spawn-fcgi
'spawn-fcgi -f /usr/lib/x86_64-linux-gnu/shibboleth/shibresponder -s
/tmp/shib.sock'.
When I send HTTP requests into /tmp/shib.sock, it works, except for when I
try to send a POST
with valid samlrequest parameter into /Shibboleth.sso/SAML2/POST, I get:
opensaml::BindingException at
(http://localhost/Shibboleth.sso/SAML2/POST)
SAML message delivered with POST to incorrect server URL
Shibresponder requires a serverName and serverPort values, which I had
randomly set to localhost and 80, so that's why it gives that URL in the
bindingexception.
It looks like the error is because it tries to send the assertion to that
URL but since I'm not running a server, there's nothing at that address.
What I'm confused about is that when I send a GET request to
/Shibboleth.sso/Login, it works and returns HTTP response containing a 302
URL. Why wouldn't the POST work?
What should serverAddress and serverPort values be when I'm not running a
local server but only have shibresponder listening on a socket, i.e can i
make it send the assertions also into the socket, because sending HTTP
requests there works?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161228/a21815f1/attachment.html>
More information about the users
mailing list