Apache not picking up Shibboleth session variables

Cantor, Scott cantor.2 at osu.edu
Tue Feb 16 15:13:13 EST 2016


> /Shibboleth.sso/Session is returning: "A valid session was not found."

Then you need to check into native.log and figure out what it's saying about the subsequent requests that should be carrying the cookies and have a valid session. Even the request to /Shibboleth.sso/Session itself.
 
>   <Location />
>     AuthType Shibboleth
>     ShibRequireSession Off
>     ShibUseHeaders On
>     require shibboleth
>   </Location>

That should export the data to headers but in general will prevent anything from actually initially getting the user logged in at all. That just isn't the whole picture. If it were, you'd never be forced to login and you would get, in fact, no data as a result.

And when vhosting is involved, lots of things are very easy to get wrong at the Apache level that cause unusual behavior.

-- Scott



More information about the users mailing list