Shibboleth SP for multiple domains

vadud3 at gmail.com vadud3 at gmail.com
Wed Jul 14 16:04:17 UTC 2021


On Wed, Jul 14, 2021 at 11:34 AM <vadud3 at gmail.com> wrote:

>
>
> On Wed, Jul 14, 2021 at 10:59 AM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> The SP computes the response path based on the virtual host of the
>> request to the resource. So if it's wrong, your web server is broken, it's
>> that simple. The web server (on Apache) is responsible for that
>> determination via the ServerName command.
>>
>> -- Scott
>>
>>
> I just restarted  shipd and httpd. It is little better. Servername for
> node1 vhost is node1.example.org. So now in SAML request
> ACS URL is correctly showing https://node1.example.org/
> Shibboleth.sso/SAML2/POST
> <https://server.example.org/Shibboleth.sso/SAML2/POST>
>
> Also now IdP https://ssotest.example.org is giving an error instead of
> going back to the server.example.org login page like earlier.
>
>
I noticed in the SAML request saml issuer is https://server.example.org .
Shouldn't it be https://node1.example.org ?


>
>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> Asif Iqbal
> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
> A: Because it messes up the order in which people normally read text.
> Q: Why is top-posting such a bad thing?
>
>

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210714/5b8bb015/attachment.htm>


More information about the users mailing list