Apache 2.4.7 - mod-shib 2.5.2 - http bindings?

Peter Schober peter.schober at univie.ac.at
Mon May 30 10:33:56 EDT 2016


* Glenn Wearen <glenn.wearen at heanet.ie> [2016-05-30 15:56]:
> Servername Apache directive should be liberty.cloudnci.ie , no port of
> scheme should appear.

Quite the opposite.  If nothing unusual is going on then only the
hostname will suffice (but including them is always permitted).  For
anything else -- TLS offloading, use of non-standard ports etc. --
schema and port virtualization are necessary and therefore required to
be included in the ServerName directive. The Shib SP has no other
source to construct correct self-referncing URLs.

E.g. if httpd listens on port 5000 then that port will need to be
included in SAML Metadata for protocol endpoints, too.
-peter



More information about the users mailing list