Missing Shibboleth attributes in $_Server
Peter Schober
peter.schober at univie.ac.at
Mon Sep 21 13:23:06 UTC 2020
* MARTINEZ, ARIEL <AMARTINEZ at hostos.cuny.edu> [2020-09-20 18:28]:
> > E.g.: what happens if you first establish a session by going to
> > /Shibboleth.sso/Login and then right after that access /secure ?
> > (or both in one go via /Shibboleth.sso/Login?target=/secure )
>
> In both cases I get the error "Unauthorized This server could not
> verify that you are authorized to access the document
> requested. Either you supplied the wrong credentials (e.g., bad
> password), or your browser doesn't understand how to supply the
> credentials required."
Doesn't make sense to me with an established session for the whole
vhost and only "require shib-session" for authz at /secure.
Change the log level for the native log to DEBUG and restart both
parts (shibd, httpd) before retrying. That should at least give the
reason why the session can't be seen.
-peter
More information about the users
mailing list