Apache 2.4.7 - mod-shib 2.5.2 - http bindings?
Peter Schober
peter.schober at univie.ac.at
Mon May 30 12:41:27 EDT 2016
* Robert Duncan <Robert.Duncan at ncirl.ie> [2016-05-30 17:39]:
> This ending up being vhosts url I was accessing
> https://liberty.cloudenci.ie/Shibboleth.sso/Metadata has no
> <location> for shibboleth - but there is bindings and they are http
I.e., what I said: The vhost does not match.
> https://liberty.cloudenci.ie:5000/Shibboleth.sso/Metadata has the
> correct bindings.
Because it't the "correct" (for your deployment) vhost.
> I still don't understand why shibboleth builds metadata for the
> primary vhost when there is no configuration for shibboleth at that
> location, by not getting a 404 I went on a wild goose chase.
The Shib SP It will ask httpd for the vhost configuration for whatever
vhost it's being accessed. If you don't want that behaviour it's
probably best to deactivate the metadata generator handler in your
shibboleth2.xml configuration and only create SAML 2.0 Metadata using
the provided metagen.sh script (and/or tuning that by hand, where
necessary).
-peter
More information about the users
mailing list