call to Shibboleth.sso is intercepted

[Tonu Mikk]

Thanks Peter!  I tried your suggestion adding

AliasMatch ^/(?!Shibboleth\.sso)(.*) / to the Virtual Host file, but this
didn't work.

You had suggested AliasMatch ^/(?!Shibboleth\.sso)(.*)
<your-file-system-resource>.  I am not entirely sure what my file system
resource would be. I assume this needs to point to where Shibboleth.sso
resides?

Roundup Issue Tracker is good software and does what we need. And the
project is live and well as too. The most widely used application of the
tracker is probably the Python language issue tracker itself -
https://bugs.python.org/ .

I may need to ask this question on the Apache list as you indicate that
Regexes for the httpd config are not the right question for the the
Shibboleth list.

On Tue, Mar 7, 2017 at 1:38 PM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Tonu Mikk <tmikk at umn.edu> [2017-03-07 18:03]:
> > NotFound: Shibboleth.sso
> >
> > I am quite sure that this error is raised because of these two
> > directives in the Virtual host file:
> >
> >         AliasMatch ^/@@file(.*) /swadm/roundup/trackers/wcag/html$1
> >         AliasMatch ^/(?!@@file)(.*) /swadm/roundup/trackers/wcag/html/
> dummy.py/$1 .
> >
> > I tried a couple different ways to make an exception for
> > Shibboleth.sso call, but could not get it.  Any suggestions how to
> > bypass these rules for Shibboleth.sso?
>
> Regexes for httpd config are not really a Shibboleth question.
> You only need to prevent ^/Shibboleth.sso from matching that regex.
> If I understand the above pattern correctly (negative lookahead)
> something like this should do for the first part?
>   AliasMatch ^/(?!Shibboleth\.sso)(.*) <your-file-system-resource>
>
> Unrelated, but I'm still curious:
> * Where do those @@file occurances came from? Looks like failed
>   macro/variable expansions to me.
> * Is roundup still, ah, around? Unless you specifically need the email
>   and cli interface there are much more modern alternatives available.
>   If you want to stick with Python Trac is an obvious one.
>   If you can live with proxying from Apache httpd gogs is really nice.
> * mod_python, really? I thought everyone used mod_wsgi (and maybe flup
>   on the application side) these days?
>
> Cheers,
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Tonu Mikk
Adaptive Technologist | Disability Resource Center |
diversity.umn.edu/disability
University of Minnesota | umn.edu
tmikk at umn.edu | 612-625-3307
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/5878b891/attachment.html>