call to Shibboleth.sso is intercepted

[Cameron Kerr]

To prevent Apache from passing /Shibboleth.sso it to the backend, you need to ensure that it handled by another authorization handler

    #
    # Ensures handler will be accessible.
    #
    <Location /Shibboleth.sso>
      AuthType None
      Require all granted
    </Location>

Potentially, you might also need to put in a ProxyPass statement to prevent such from being passed to the backend

ProxyPass /Shibboleth.sso !

But in your case you don’t appear to be using a ProxyPass, so that shouldn’t be needed.

One useful tip: if your version of Apache httpd supports it (eg. RHEL6+) add %R to your LogFormat to log the handler that processed a request (can be useful for diagnosing where things like a redirect come from)



Cheers,
Cameron


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170307/8c2e3559/attachment-0001.html>