Shibboleth SP not redirecting to the deep link

krrishv krish.v at gmail.com
Fri Dec 21 13:26:16 EST 2018


Hi Scott, Peter,

I have the apache webserver running in port 80 and weblogic app server
running in same box in port 8000.

I have a DNS alias created for webserver and app server to be people.tu.com.
Do i need to enable SSL on apache side, So we can resolve the secure cookie
issue?

Here is the shobboleth2.xml

Replace the entityID with the one for the your application


<ApplicationDefaults entityID="https://people.tu.com"
REMOTE_USER="username">

Path is changed to /php

<Sessions lifetime="7200" timeout="3600" relayState="ss:mem"
checkAddress="false
" handlerSSL="true" cookieProps="; path=/php; secure; HttpOnly">
Replace the SSO entityID with the one from the Okta app

<SSO entityID="http://www.okta.com/exk9vpvsgsOK2xHzD0x7"
discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
SAML2 SAML1
</SSO>
Uncomment out the local Metadata and change it to point to the
/etc/shibboleth/OktaMetadata.xml file

<MetadataProvider type="XML" validate="true"
file="/etc/shibboleth/OktaMetadata.xml"/>

In Apache side i have this

vi /etc/httpd/conf.d/proxies.conf
And add the following lines:
ProxyPass "/php" "http://people.tu.com:8000/php"
ProxyPassReverse "/php" "http://people.tu.com:8000/php"

<Location /php>
AuthType shibboleth
ShibUseHeaders on
ShibRequestSetting requireSession 1
require shib-session
</Location>


Am i missing anything here. Can you throw some light.




--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list