ApplicationOverride with apache reverse proxy and different configurations per customer

[Micky Williamson]

I’m using c2 as the application id, and /c2/Shibboleth.sso as the handlerUrl.
In my apache config,
I have nothing proxying c2, I have a <location cust2> directive in there…so the url /c2/Shibboleth.sso is arriving at the apache server, and the apache server doesn’t know what to do with it..which makes me think I’m supposed to let the apache config know about /c2 as well,  does that sound correct?
When a request comes to this sever for the default application, it comes to https://server/Shibboleth.sso...and shibboleth handles that just fine, it just doesn’t handle /c2/… The only place I’ve set that up is in the applicationOverrides section…
Here is a different question that might be related, if I pull a https://server/Shibboleth.sso/Status, I get a nice summary of the config for shibboleth, but NO mention of the override.  If I try a https:/server/c2/Shibboleth.sso/Status…I get a 404…which jibes with what I reported earlier…

the shibd.log file has this:
2016-07-12 20:51:21 INFO Shibboleth.Listener : registered remoted message endpoint (c2/Login::run::SAML2SI)
2016-07-12 20:51:21 INFO Shibboleth.Listener : registered remoted message endpoint (c2/Login::run::Shib1SI)

so it looks as though c2 is being loaded…but I’m not sure the override is being read…is that possible?



I’m usOn Jul 12, 2016, at 3:16 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

On 7/12/16, 4:53 PM, "users on behalf of Micky Williamson" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net> on behalf of mwilliamson at silasg.com<mailto:mwilliamson at silasg.com>> wrote:

I’m assuming that I’m still missing something either on my apache config side, or my
Shibboleth side….

You have something else in Apache picking up the request and not handling it. I doubt it's an Apache error page, it's probably something more exotic.

If you're reverse proxying everything under /c2 on a server running the SP then you need to exempt the handler location from that proxying.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


This communication may contain proprietary or other confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160712/051316ad/attachment.html>