shib attributes missing & htaccess redirect issue in shib 2.6 system
Satheesh Kumar
satheeshvsbk at gmail.com
Sun Jun 11 15:17:32 EDT 2017
Currently we have SHIB 2.4 working system and We are upgrading it to SHIB
2.6.
We did the following steps for SHIB 2.6 upgrade:
1. Compiled SHIBD with all the needed dependencies and also
checked the configuration by running SHIBD –t It displays “Overall
configuration is loadable”.
1.
Then, We replaced the existing SHIBD 2.4 file with SHIBD 2.6 file(not
sure this step is correct??)& added dependent libraries(like
libsaml.so.,etc.).
2.
We can able to start shibd & Apache without any problems.
3.
We are running with apache 2.2.3 and we didn’t make any new
configuration changes in these files· Shibboleth2.xml · Httpd.conf ·
Apache22.conf
4.
*Problem*:
5. Not receiving shib attributes from shibd to our app(interface b/w
client to shibd & IDP). From IDP to shibd we are getting attributes.
6. On comparing the apache logs of SHIB2.4 & SHIB2.6 I found the below
two entries are missing in SHIB 2.6 system: [debug] mod_apache.cpp(724):
[client 10.00.00.00] *shib_auth_checker*(3464): ENTER, referer:
https://xxx-shibbolethidp.xxxxx.com/idp3/profile/SAML2/Redirect/SSO
[debug] mod_apache.cpp(393): [client 10.xx.xx.xx] *htaccess*: a rule was
successful, granting access, referer:
https://xxx-shibbolethidp.xxxxxxx..com/idp3/profile/SAML2/Redirect/SSO
HTACCESS redirect and shib_auth_checker process is not happening. Can you
guys please help us in finding what is causing this issue. Your
suggestion/advice will help us a lot …
Thanks,
Satheesh K
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170612/b3a07264/attachment.html>
More information about the users
mailing list