External applications on a mainframe server.

[Ed HOLT]

Hi,

 

I am are looking at using Shibboleth to control access to some legacy
applications running on an IBM mainframe. Currently these applications are
accessed through a Virtel web server than also runs on the mainframe. I have
a SP/IDP/LDAP running successful and can protect applications running on my
local SP so I know that the shibboleth setup for local applications is
working. What I would like to be able to do is to reverse proxy from the SP
server through to the mainframe server once credentials have been validate
and access the mainframe applications through the Virtel web server. I have
the following configure on my Apache/SP set up:-

 

In httpd-shibboleth.conf

 

<Location /virtel>

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  require shib-session

  ProxyPass https://virtel.syspertec.com:41002/ connectiontimeout=10
timeout=30

  ProxyPassReverse https://virtel.syspertec.com:41002/


</location>         

 

When I access sp.syspertec.com/virtel I get the signin panel and provide my
credentials to the idp. I am then redirected to the Virtel mainframe server.
Fiddler (http trace) shows a HTTP response is returned from the Virtel
server. Unfortunately the URL is rooted to the local sp.syspertec.com. Any
subsequent pages will not be found, they are not being served by the
external server, but by the local SP server. I end up with a 404's. Can
Shibboleth support such a configuration or am I barking up the proverbial
wrong tree here.

 

Many thanks.

 

  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161013/90260df6/attachment.html>