F5 monitor for Shib

[Peter Schober]

* Robert Lamothe <robert_lamothe at yahoo.com> [2016-06-08 17:16]:
>     I have 2 shib servers behind my F5.  To get monitoring working
> I'm using a half HTTP connection which is satisfied so long as the
> port is open, however I've had failures where HTTP is responsive but
> shib isn't working.  On a web server I can telnet or openssl to the
> port and perform a GET / to look for a response, however this
> doesn't work for shib, does anyone have a suggestion how I can send
> a test to the shib server to insure it's up and functioning?

Try the status page, at /idp/status by default.
You'll need to enable access to that from whatever IP address the IDP
sees for the F5:
https://wiki.shibboleth.net/confluence/display/IDP30/AccessControlConfiguration
-peter