how to configure mod_shib behind Load Balancer

[Rainer Hoerbe]

>> So I tried to simplify and removed the vHost. The <location> was defined
>> outside the vhost already. Shouldn’t any request match /Shibboleth.sso, like:
>> curl http://10.1.1.5:8080/Shibboleth.sso/Status   # -> 404
> 
> The handler for a request when the handlerURL is relative/defaulted is computed based on the vhost of the request URL, and that comes from Apache reporting the scheme, host, and port. If the handler for a request isn't the requested URL then it's treated as a resource request and passed along.

So you are saying that mod_shib will only with virtual hosts, not with the global configuration? 
> 
> In addition, if handlerSSL is turned on, that will prevent it from recognizing a request over http as a handler request.
handlerSSL="false"
> 
>> Would someone on the list have a working example config file for and SP
>> with a reverse proxy?
> 
> The settings depend on the virtualization that's being done and are Apache only, the SP isn't involved. If Apache is correctly configured, the SP just works. There is nothing unusual needed in the SP configuration except on IIS, which doesn't support virtualization.

My limited knowledge is that http host virtualization is just matching listener-IP/port or Host headers with VirtualHost directives. As a result, the file content handler does match the URL - the request finally goes to the correct document root. This does work behind load balancers. The configuration with mod_shib seems to require be a magic I do not understand. I read thru apache docs again, but I could not find any explanations of what you are recommending. So I beg humbly for the right keywords to look up, or a example of vhost+shib.conf working behind a proxy.

Thanks, Rainer