call to Shibboleth.sso is intercepted

[Tonu Mikk]

Thanks Cameron!  I tried your suggestion by adding

    <Location /Shibboleth.sso>

      AuthType None

      Require all granted

    </Location>

to the virtual config file, but it didn't work.


I also tried the ProxyPass /Shibboleth.sso ! and this didn't work either.


Thanks for sharing the tip about %R switch.  I will need to enable better
logging than the built in Python debugger.

On Tue, Mar 7, 2017 at 2:07 PM, Cameron Kerr <cameron.kerr at otago.ac.nz>
wrote:

> To prevent Apache from passing /Shibboleth.sso it to the backend, you need
> to ensure that it handled by another authorization handler
>
>
>
>     #
>
>     # Ensures handler will be accessible.
>
>     #
>
>     <Location /Shibboleth.sso>
>
>       AuthType None
>
>       Require all granted
>
>     </Location>
>
>
>
> Potentially, you might also need to put in a ProxyPass statement to
> prevent such from being passed to the backend
>
>
>
> ProxyPass /Shibboleth.sso !
>
>
>
> But in your case you don’t appear to be using a ProxyPass, so that
> shouldn’t be needed.
>
>
>
> One useful tip: if your version of Apache httpd supports it (eg. RHEL6+)
> add %R to your LogFormat to log the handler that processed a request (can
> be useful for diagnosing where things like a redirect come from)
>
>
>
>
>
>
>
> Cheers,
>
> Cameron
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Tonu Mikk
Adaptive Technologist | Disability Resource Center |
diversity.umn.edu/disability
University of Minnesota | umn.edu
tmikk at umn.edu | 612-625-3307
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/f0e48adb/attachment-0001.html>