call to Shibboleth.sso is intercepted

Peter Schober peter.schober at univie.ac.at
Tue Mar 7 14:38:57 EST 2017


* Tonu Mikk <tmikk at umn.edu> [2017-03-07 18:03]:
> NotFound: Shibboleth.sso
> 
> I am quite sure that this error is raised because of these two
> directives in the Virtual host file:
> 
>         AliasMatch ^/@@file(.*) /swadm/roundup/trackers/wcag/html$1
>         AliasMatch ^/(?!@@file)(.*) /swadm/roundup/trackers/wcag/html/dummy.py/$1 .
> 
> I tried a couple different ways to make an exception for
> Shibboleth.sso call, but could not get it.  Any suggestions how to
> bypass these rules for Shibboleth.sso?

Regexes for httpd config are not really a Shibboleth question.
You only need to prevent ^/Shibboleth.sso from matching that regex.
If I understand the above pattern correctly (negative lookahead)
something like this should do for the first part?
  AliasMatch ^/(?!Shibboleth\.sso)(.*) <your-file-system-resource>

Unrelated, but I'm still curious:
* Where do those @@file occurances came from? Looks like failed
  macro/variable expansions to me.
* Is roundup still, ah, around? Unless you specifically need the email
  and cli interface there are much more modern alternatives available.
  If you want to stick with Python Trac is an obvious one.
  If you can live with proxying from Apache httpd gogs is really nice.
* mod_python, really? I thought everyone used mod_wsgi (and maybe flup
  on the application side) these days?

Cheers,
-peter


More information about the users mailing list