SAML message intended destination endpoint did not match the recipient endpoint

[Ryan Suarez]

On 7/11/16, 1:58 PM, "users on behalf of Ryan Suarez" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net> on behalf of ryan.suarez at sheridancollege.ca<mailto:ryan.suarez at sheridancollege.ca>> wrote:

The fact that the directory says "embedded/jetty-base/" means that its
likely NOT using the jetty-distribution, and the configuration you are
doing isn't being applied like you think it is.  You'll need to understand,
intimately, how Shibboleth configures itself, then you can configure it
according to its techniques.

If you're on Windows, then you can't configure this with the embedded Jetty and have to configure your own container. If you're not using the Windows installer + Jetty option, then there is no "embedded/jetty-base" involved in a properly configured deployment, so I don't know what you asked them, but it was perhaps misleading.

This is shib v3.2.1 on ubuntu 14.04 with jetty 9.3.9.  They were referring to this statement:


This is my shibboleth-identity-provider-3.2.1/embedded/jetty-base/etc/jetty.xml:

    <New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">

      <Set name="secureScheme">https</Set>

      <Set name="securePort"><Property name="jetty.secure.port" default="443" /></Set>

      <Set name="outputBufferSize"><Property name="jetty.output.buffer.size" default="32768" /></Set>

      <Set name="requestHeaderSize"><Property name="jetty.request.header.size" default="8192" /></Set>

      <Set name="responseHeaderSize"><Property name="jetty.response.header.size" default="8192" /></Set>

      <Set name="sendServerVersion"><Property name="jetty.send.server.version" default="true" /></Set>

      <Set name="sendDateHeader"><Property name="jetty.send.date.header" default="false" /></Set>

      <Set name="headerCacheSize">512</Set>

      <Call name="addCustomizer">

        <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg>

      </Call>

    </New>


Is this the right place to put the x-forward-for configuration?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160711/4f062005/attachment.html>