Issue with Shibboleth SP - Endpoint Mismatch Error

Peter Schober peter.schober at univie.ac.at
Tue Oct 15 17:42:25 UTC 2024


Wrt "X didn't match X": What Paul said. (Obfuscation doesn't help here.)
Other comments below.

Luan Trindade via users <users at shibboleth.net> [2024-10-15 16:27 CEST]:
> Apache configuration file:
> <VirtualHost *:80>
>     ServerName FQDN.DOMAIN.br
> 
>     CustomLog /var/log/apache2/dev.access.log combined
>     ErrorLog /var/log/apache2/dev.error.log
> 
>     ProxyPreserveHost On
>     Redirect permanent "/" "https://FQDN.DOMAIN.br/"
> 
> </VirtualHost>

Unrelated, but why have a plain HTTP vhost at all?
Since noone ever enters your IDP's address into their browser (they
get redirected there) there's no point in catering to people not
typing "https://" before the host name (until web browsers try HTTPS
first by default).

FWIW, I'm using the Java Servlet container as TLS-enabled web server
so I have no need for Apache httpd at all. One less server process
that doesn't add anything, really. (Except learning how to configure
TLS in the Java Servlet container of your choice, I suppose.)

Best,
-peter


More information about the users mailing list