SP V3 handlerUrl="/myapppath/Schibboleth.sso" leads to 404

[Aaron Howell]

I’m not sure but I would think:
<Path name="acs/Shibboleth.sso" applicationId="spacs" />

Should actually be simply
<Path name="acs" applicationId="spacs" />

As that matches the config example on the https://wiki.shibboleth.net/confluence/display/SP3/ApplicationOverride

Cheers,
Aaron


On 10 Mar 2019, at 11:42 pm, Peter Egli <pesche.egli at bluewin.ch<mailto:pesche.egli at bluewin.ch>> wrote:



Am 09.03.2019 um 22:24 schrieb Cantor, Scott:

why does the SP think, that the request /acs/Shibboleth.sso/SAML2/POST/ is something that it should ignore?


Don't know. My ability to offer free support no longer extends to these sorts of debugging issues.

My advice is not to use overrides, and you most certainly shouldn't be using them at the path level. This is why.

Thanks for your advice. The use of "overrides" is only a workaround because the use of the "default" configuration doesn't work anymore since the upgrade from Shibboleth SP V2.x --> Shibboleth SP V3.0.3. (see my 1st mail, extract below)

At this point, the backward compatibility seems to be broken -- or is it just a bug?

I am happy to provide further details and feedback and are also available for tests to improve Shibboleth.

/Peter

> I just upgraded my SP (running on IIS WIN2012R)  from 2.x to the latest 3.x \
> version.
> So far, everything went well. There's a special request mapping, which worked in \
> 2.x and doesn't in 3.x:
>
> mysp.org/myapp<http://mysp.org/myapp> ==> the secured application context
> mysp.org/acs/Shibboleth.sso<http://mysp.org/acs/Shibboleth.sso> ==> handlerUrl for ACS

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190311/1633dd25/attachment.html>