shib SP 2.6 NativeSPSessionInitiator location defaults to /DS

Jehan Procaccia jehan.procaccia at tem-tsp.eu
Mon Sep 17 16:43:49 EDT 2018


Hello

I've created 2 applicationOverrides for 2 vhosts on apache 2.4 and shib 
SP 2.6 and I cannot find out how to configure a specific apache Location 
to point to a different SessionInitiator than the default /DS ?
in shibboleth2.xml I did declare 2 sessionInitiator (present in metadata 
as well) pointing to 2 different
SAMLDS URL (2 diffrents WAYFs)
/<SessionInitiator type="Chaining" Location="/DS" id="DS" 
isDefault="true" relayState="cookie">//
// <SessionInitiator type="SAMLDS" 
URL="https://Wayf1.domain.eu/wayfGroup1/WAYF.php"/>//
//
//<SessionInitiator type="Chaining" Location="/DSUPS" id="DSUPS" 
isDefault="true" relayState="cookie">//
//<SessionInitiator type="SAMLDS" 
URL="https://Wayf2.domain.eu/wayfGroup2/WAYF.php"/>/

but cannot tel from an apache Location how to point to /DSUPS for shib 
sessioninitiator
looking at 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings 
I tried this (bold below, but commented now because it failed)
/<Directory "/var/www/app2/secure/">//
//   AllowOverride All//
//  AuthType shibboleth//
//  ShibRequireSession On//
/*/ # ShibRequireSessionWith /DSUPS/*/
//  require shibboleth//
//</Directory>/

without success , I've been redirected to /DS and not /DSGRP2

thanks for your help .



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180917/78a7816b/attachment.html>


More information about the users mailing list