Issue setting up Shibboleth on RedHat server running apache. /secure is resolving, but /Shibboleth.sso is not
Kelsey, Bart
Bart.Kelsey at osumc.edu
Fri Jan 11 15:07:57 EST 2019
All the links are resolving now, but I'm running into another problem:
opensaml::FatalProfileException: Your client's current address (10.81.6.254) differs from the one used when you authenticated to your identity provider. To correct this problem, you may need to bypass a proxy server.
I assume that this is happening because I have to access my server through netscaler, but I access webauth from the outside. Is there any way around this?
________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Friday, January 11, 2019 1:14 PM
To: Shib Users
Subject: Re: Issue setting up Shibboleth on RedHat server running apache. /secure is resolving, but /Shibboleth.sso is not
On 1/11/19, 1:03 PM, "users on behalf of Kelsey, Bart" <users-bounces at shibboleth.net on behalf of Bart.Kelsey at osumc.edu> wrote:
> Do you know offhand how to deal with a situation where the apache server is internally using http, but it's going
> through netscaler and the outside world is seeing the site as https?
Yes, that's what the ServerName command in Apache is for, you override the physical scheme in the ServerName. Shibboleth doesn't need to know anything about it.
-- Scott
--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=k9MF1d71ITtkuJx-PdWme51dKbmfPEvxwt8SFEkBfs4&r=NMHu15r_--z-IN3l3VxllwID8IuGlaFBirlezBl7PzQ&m=hCiPj5h01l2_ik0stsklzsMIxYqZD-n4sHJt_YwtyxY&s=9mJkKltZ-Sth-5Yx_TCHpw6FniuGN6ycKkk9j2GTdgE&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list