how to configure mod_shib behind Load Balancer

[Cantor, Scott]

> The Apache httpd has this virtual host:
> <VirtualHost *:8080>
>     ServerName sp1.test.wpv.portalverbund.at

You have to virtualize the scheme and port in ServerName, not just the name.

> Various combinations with "SetHandler shib“ and "Require all granted“ do
> not work either. The documentation is saying that "require shibboleth“ is not
> blocking access, so why does it say "request not allowed without
> authentication“?

The SP isn't saying that, something else is, but the basic problem is that the system is not seeing a request for that URL as a request to the SP handler location. That's due to an incorrectly virtualized system, possibly due to the ServerName mistake above.

> Changing „AuthType None“ to "AuthType shibboleth" results in a 404 with
> similar messages:

It doesn't matter what AuthType is for that URL. A request to the handler is always honored by the SP provided it knows that the request is in fact for its handler.

-- Scott