shib attributes missing & htaccess redirect issue in shib 2.6 system

Satheesh Kumar satheeshvsbk at gmail.com
Sun Jun 11 15:17:32 EDT 2017


Currently we have SHIB 2.4 working system and We are upgrading it to SHIB
2.6.

We did the following steps for SHIB 2.6 upgrade:

   1.   Compiled SHIBD with all the needed       dependencies and also
checked the       configuration by running SHIBD –t It displays “Overall
configuration is loadable”.

   1.

   Then, We replaced the existing SHIBD 2.4 file with SHIBD 2.6 file(not
   sure this step is correct??)& added dependent libraries(like
   libsaml.so.,etc.).
   2.

   We can able to start shibd & Apache without any problems.
   3.

   We are running with apache 2.2.3 and we didn’t make any new
   configuration changes in these files· Shibboleth2.xml · Httpd.conf ·
   Apache22.conf
   4.

   *Problem*:
   5. Not receiving shib attributes from shibd to our app(interface b/w
   client to shibd & IDP). From IDP to shibd we are getting attributes.
   6. On comparing the apache logs of SHIB2.4 & SHIB2.6 I found the below
   two entries are missing in SHIB 2.6 system: [debug] mod_apache.cpp(724):
   [client 10.00.00.00] *shib_auth_checker*(3464): ENTER, referer:
   https://xxx-shibbolethidp.xxxxx.com/idp3/profile/SAML2/Redirect/SSO
   [debug] mod_apache.cpp(393): [client 10.xx.xx.xx] *htaccess*: a rule was
   successful, granting access, referer:
   https://xxx-shibbolethidp.xxxxxxx..com/idp3/profile/SAML2/Redirect/SSO

HTACCESS redirect and shib_auth_checker process is not happening. Can you
guys please help us in finding what is causing this issue. Your
suggestion/advice will help us a lot …

Thanks,

Satheesh K
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170612/b3a07264/attachment.html>


More information about the users mailing list