Issue setting up Shibboleth on RedHat server running apache. /secure is resolving, but /Shibboleth.sso is not

[Kelsey, Bart]

Do you know offhand how to deal with a situation where the apache server is internally using http, but it's going through netscaler and the outside world is seeing the site as https?  /Shibboleth.sso is resolving correctly now, but when I go to /secure, I see this error from webauth.service.ohio-state.edu: "The login service was unable to identify a compatible way to respond to the requested application."
________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Friday, January 11, 2019 12:21 PM
To: Shib Users
Subject: Re: Issue setting up Shibboleth on RedHat server running apache. /secure is resolving, but /Shibboleth.sso is not

On 1/11/19, 12:09 PM, "users on behalf of Kelsey, Bart" <users-bounces at shibboleth.net on behalf of Bart.Kelsey at osumc.edu> wrote:

> I'm trying to get Shibboleth set up on a RedHat server running apache.  Currently, /secure correctly forwards the user to > the Shibboleth login page, but the login fails because nothing under /Shibboleth.sso is resolving correctly (I'm getting a
> "not found" error).

Incorrect/inappropriate change to the handlerURL setting or a proxy/forwarding situation and not excluding /Shibboleth.sso from the proxying are the only reasons this can happen with Apache.

What exactly returns the 404 is the most relevant factor. If not Apache itself it's a clear sign of a proxy rule being wrong. Apache's errors are self-evident, they don't look anything like a 404 from a Tomcat or some other proxied container or server.

-- Scott



--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=k9MF1d71ITtkuJx-PdWme51dKbmfPEvxwt8SFEkBfs4&r=NMHu15r_--z-IN3l3VxllwID8IuGlaFBirlezBl7PzQ&m=NL10SJ4Cxt-93M5-x6uknszdIvCZgOIGYxlce1LoI7Y&s=2i5uDgLng-7xFZcWywMck2cyhmzmZlapHhIB9OrjTUA&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net