Shibboleth SP for multiple domains

[Ray Bon]

Perhaps your load balancer can be configured to allow your IP to access a particular node in the cluster.

Ray

On Wed, 2021-07-14 at 16:36 -0400, vadud3 at gmail.com wrote:
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.



On Wed, Jul 14, 2021 at 3:59 PM Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
"I need to occasionally directly access a server node" is not a use case for anything but one entityID and one server name, period.

The best way to test a node is /etc/hosts and just fake it on the client so you need do nothing else at all.


I don't have direct access to a node from a browser. That is why created new dns entries for them and then made vhost for each node


The second best answer is to add extra endpoints to the metadata with all of the server-specific endpoints required for the occasional test but that's not really practical because the servers themselves would have to magically know when to use their own hostnames instead of the virtual one, and there's no easy way to do that, though that's possible with enough work.



I am curious and like to try if you have some direction.

Which brings us back to using /etc/hosts on the client when you have to reference a specific server. You're taking a simple client trick and making it the server's problem. Just don't do that and you're done.

You shouldn't be going anywhere near the ApplicationOverride feature and the documentation does nothing but warn you not to. It has absolutely nothing to do with your use case and won't solve any problem you're trying to solve, while adding about a dozen more.

-- Scott


--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210714/da5f8e4e/attachment.htm>