Apache Shibboleth SP Stuck at /Shibboleth.sso/SAML2/POST after IDP login

[Cantor, Scott]

> If it is enforcing, and you do not want to disable enforcement,
> you can follow the link on the page above or you can google
> "selinux mod_shib-to-shibd" for (unsupported) examples of
> what might be required to allow the communication between
> the two processes.

Notably that's not going to change in the future (it's still going to have to communicate out and I don't imagine using HTTP for that is any different from SELinux' perspective) and there are still no contributors willing to own and maintain a policy for it.

I will however make sure that the V4 agent docs cover fairly precisely what the agent has to be able to do.

-- Scott