problems with multiple IP adresses for SP? Aliases?

[Cantor, Scott]

> 1. are there any known problems known when the SP is resolved into two
> IP adresses (on the same machine using <VirtualHost 10.0.0.11:443
> 10.0.0.12:443>) we are facing several errors from the SP on some
> requests while loading the page (seems to be always if the first IP
> adress is used):

Not really, no.

> - opensaml::SecurityPolicyException (Rejecting replayed message ID
> (_xxxxxxxx))
> - opensaml::FatalProfileException (A valid authentication statement was
> not found in the incoming message)
> The AFAIK similar configuration works without problems in the slightly
> simpler Testenvironment.
> The more realistic reason might be a configuration error on our side -
> but we can not find any misconfiguration.

It has nothiing to do with the address and those are not meaningful errors, you need to use your logs.

> 2. Is it possible (any hint to the Wiki or Doku) to use ServerAlias
> names for the SP? Well, our application shold be available using
> different URLs/Servernames (foo.bfs.de as well as bar.bfs.de ...) -
> anybody who can point me to a configuration example. shibboleth2.xml has
> onl one entityID entry). 

An entityID has nothing directly to do with the name(s) of your vhosts. It's a name for your SP(s). Peter answered the rest of this.

-- Scott