Shibboleth SP for multiple domains

[vadud3 at gmail.com]

On Wed, Jul 14, 2021 at 3:59 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> "I need to occasionally directly access a server node" is not a use case
> for anything but one entityID and one server name, period.
>
> The best way to test a node is /etc/hosts and just fake it on the client
> so you need do nothing else at all.
>

I don't have direct access to a node from a browser. That is why created
new dns entries for them and then made vhost for each node


>
> The second best answer is to add extra endpoints to the metadata with all
> of the server-specific endpoints required for the occasional test but
> that's not really practical because the servers themselves would have to
> magically know when to use their own hostnames instead of the virtual one,
> and there's no easy way to do that, though that's possible with enough work.
>
>
I am curious and like to try if you have some direction.


> Which brings us back to using /etc/hosts on the client when you have to
> reference a specific server. You're taking a simple client trick and making
> it the server's problem. Just don't do that and you're done.
>
> You shouldn't be going anywhere near the ApplicationOverride feature and
> the documentation does nothing but warn you not to. It has absolutely
> nothing to do with your use case and won't solve any problem you're trying
> to solve, while adding about a dozen more.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210714/74fe557e/attachment.htm>