DuoOIDC HTTP Proxy

Sean Mason sean.mason at uwaterloo.ca
Wed May 19 13:29:00 UTC 2021


I've confirmed that the Duo host is reachable via the proxy using 'curl' on the machine running Shibboleth.
I've double checked the settings in duo-oidc-authn-config.xml, and they are the same as what was used on the command line.

Is there some logging I can enable to get insight into what settings the HttpClient is using at run time?

Thanks,
Sean.

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Wednesday, May 19, 2021 9:18 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: DuoOIDC HTTP Proxy

On 5/19/21, 9:03 AM, "users on behalf of Sean Mason" <users-bounces at shibboleth.net on behalf of sean.mason at uwaterloo.ca> wrote:

>    My latest attempt has me defining the 
> “shibboleth.authn.DuoOIDC.NonBrowser.HttpClient” bean in conf/authn/duo-oidc-authn-config.xml to be:

That's what's documented and matches the code. If it doesn't work, either the settings had to be wrong, I don't think that's what was actually attempted, or there's a bug. Or perhaps the proxy itself has outbound rules limiting what it will allow.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list