SAML message delivered with POST to incorrect server URL. with Google Cloud Load Balancer

[O'Quinn, Dennis]

Hi Scott (et al), I was able to add ServerAlias for the desired name in my httpd-ssl.conf file and get it to work once I removed the 443 port reference from my URLS in my metadata.  Interestingly, I was unable to 'add' port 443 to my name on the SP end via that ServerAlias directive, or even the ServerName directive.  I would only able to 'remove' all port references.

Thanks, for the help

D


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Thursday, May 31, 2018 9:08 PM
To: Shib Users <users at shibboleth.net>
Subject: [EXTERNAL] RE: SAML message delivered with POST to incorrect server URL. with Google Cloud Load Balancer

> Is the httpd.conf ServerName directive the only way to control this
> behavior and get the target and destination names to match?

Apache requires that be set for most  applications to run properly in an environment like that, so yes, that's the only way for Shibboleth to work since it has to be set regardless. That's a feature (you configure your web server properly and the SP just works). IIS doesn't support virtualization so the SP is forced to compensate, but Apache does so there's no reason to do anything special.

If your application functions without ServerName set, it either never generates self-referential links or it's got a bug.

-- Scott

--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=kP5AQYgmcluekYHX1y1AatSwkecj18Qnb1_gN27kEMs&s=pzAYH6S4SRbEIaLco0-kJhYphQG_dIegYXJXVmR42T0&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

________________________________

The information in this Internet Email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this Email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this Email are subject to the terms and conditions expressed in any applicable governing The Home Depot terms of business or client engagement letter. The Home Depot disclaims all responsibility and liability for the accuracy and content of this attachment and for any damages or losses arising from any inaccuracies, errors, viruses, e.g., worms, trojan horses, etc., or other items of a destructive nature, which may be contained in this attachment and shall not be liable for direct, indirect, consequential or special damages in connection with this e-mail message or its attachment.