Apache 2.4.6, shibd 2.6.0, Shibboleth.sso/status always returns 404

John Muir johnmuir at boisestate.edu
Wed Jan 11 19:23:10 EST 2017


I'm banging my head on this one.  I have a working configuration for apache
2.2.15 and shib 2.6 running on rhel6.  New server on rhel7 with apache
2.4.  Nothing seems to connect the status page.  I can get proper response
on the /secure path with requiring shib login, config is exactly the same
but this isn't making any sense whatsoever.  Docs aren't seemingly well up
to date.  I've played with multiple options on the <location
/Shibboleth.sso> statement in the apache conf.  It seems regardless of what
I use I can't get that to work.  I'm aware of the ACLs on the status page,
I can't get anything under Shibboleth.sso to work so it's got to be the
handler but the only other handler in play is a proxy that is restricted to
a specific set of paths via a location match which looks nothing like
Shibboleth.

Apache debug logs:

[Wed Jan 11 16:53:29.091431 2017] [mod_shib:debug] [pid 110964]
mod_shib.cpp(320): [client 10.27.37.193:37284] get_request_config created
per-request structure
[Wed Jan 11 16:53:29.091647 2017] [authz_core:debug] [pid 110964]
mod_authz_core.c(809): [client 10.27.37.193:37284] AH01626: authorization
result of Require all granted: granted
[Wed Jan 11 16:53:29.091655 2017] [authz_core:debug] [pid 110964]
mod_authz_core.c(809): [client 10.27.37.193:37284] AH01626: authorization
result of <RequireAny>: granted
[Wed Jan 11 16:53:29.091693 2017] [mod_shib:debug] [pid 110964]
mod_shib.cpp(921): [client 10.27.37.193:37284] shib_fixups entered in pid
(110964)
[Wed Jan 11 16:53:29.091775 2017] [weblogic:debug] [pid 110964]
URLFactory.cpp(162): [client 10.27.37.193:37284] URLfactory Created: 110964
[Wed Jan 11 16:53:29.091809 2017] [mod_shib:debug] [pid 110964]
mod_shib.cpp(815): [client 10.27.37.193:37284] shib_handler entered in pid
(110964):
Looking good so far.

[Wed Jan 11 16:53:29.091869 2017] [core:info] [pid 110964] [client
10.27.37.193:37284] AH00128: File does not exist:
/var/www/html/Shibboleth.sso/


There are no other usable errors.  Shibd.log is happy.  And I've had to fix
that one a few times thanks to attribute mapping back to ADFS being
misconfigured.  I have a warning about reloadable attributes and info.  No
errors.  Native log has an error about creating an appender log and failing
to load a new logging config.  Everything else is warning/info that isn't
related at all to what I'm seeing.

Thoughts?

Thanks,
John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170111/de0df5dd/attachment-0001.html>


More information about the users mailing list