Running IdP on Jetty behind Apache

[Thomas Zwirner]

Hello from germany,
 
i try to run a IdP on Jetty behind Apache because i have one machine which should provide both IdP and SP. SP will run with Apache on Port 443, IdP should be available about external https://www.example.org/idp/
 
Both, IdP and SP, run without problems if i start Apache and Jetty separated. My goal now is to use mod_proxy_http to forward requests from Apache on /idp/ to Jetty on internal Port 8080.
 
I followed the instructions here: https://wiki.shibboleth.net/confluence/display/IDP30/Running+the+IdP+on+Jetty+behind+Apache+httpd - but with no success.
 
What i use:
CentOs 7.3 with all updates
IdP 3.2.1
Jetty 9.3.6
Apache 2.4
 
The local command "curl http://localhost:8080/idp" ends up in "curl: (52) Empty reply from server". Same result is visible on request from extern via https://www.example.org/idp/
 
Neither the Jetty-Log nor the Shibboleth-Logfile show any signs to this requests (running both in DEBUG-Mode).

Additional:
Which jetty.xml is meant in the documentation? There are two, one in /opt/shibboleth-idp/jetty-base/jetty/, which seems not to be used, and one in /opt/installfest/jetty/etc/, which is used but would be overwritten with each Jetty-update.
 
So: what am i missing?
 
Thomas Zwirner
- Leipzig, Germany