<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Thank you very for your help.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>My questions are below. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Christine<o:p></o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> Cantor, Scott E.
[via Shibboleth] [mailto:<a href="/user/SendEmail.jtp?type=node&node=7579906&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>] <br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, June 05, 2012 12:09
PM<br>
<b><span style='font-weight:bold'>To:</span></b> Christine Ross<br>
<b><span style='font-weight:bold'>Subject:</span></b> Re: Do I configure
multiple Location containers if all vhosts share the same location</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>On 6/5/12 11:59 AM,
"csross" <<a href="/user/SendEmail.jtp?type=node&node=7579905&i=0"
target="_top" link="external" rel="nofollow">[hidden email]</a>> wrote: <br>
> <br>
> <br>
>My shibboleth2.xml has a generic ApplicationDefault entityID <br>
>(sp.example.org) and I use ApplicationOverride to specify the entityID, <br>
>applicationID, MetadataProvider, Sessions and SSO entityID for each vhost <br>
>that is protected. <br>
<br>
<font color=navy><span style='color:navy'>>>></span></font>If you do
that, it's much more work. You should have specific reasons for <br>
<font color=navy><span style='color:navy'>>>></span></font>doing it,
not just because you think it should be that way. So far, I <br>
<font color=navy><span style='color:navy'>>>></span></font>haven't
heard one, and I can tell you that juggling an entityID per <br>
<font color=navy><span style='color:navy'>>>></span></font>customer is
almost always the wrong answer. Not always, but usually.<font color=navy><span
style='color:navy'><o:p></o:p></span></font></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>These
are ssl clients so I need a separate IP and vhost for each unique IP. Every
vhost/entityID (I know they aren’t the same thing) will have a different
MetadataProvider, SSO entityID and possibly sessions. That is why I am using
ApplicationOverrides. If I get a new client I thought I would just add another
ApplicationOverride section and a vhost in Apache. We have a wildcard for
non-shib clients but the docs say I need UseCanonicalName On and I don’t
believe that works with wildcard vhosts.<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>What is
the alternative, using a separate Apache server for each shib client?<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
>1) If I do not specify any applicationID in the apache22.config, does
<br>
>that <br>
>automatically assign 'default' and then reassign the applicationID set in <br>
>the ApplicationOverride for that entityID? Reassign is just the word
I <br>
>chose to describe what I am thinking. If this won't assign the
correct id <br>
>this way, I'm thinking I need to create a separate Include file for each <br>
>vhost. <br>
<br>
<font color=navy><span style='color:navy'>>>></span></font>Everything
maps to default out of the box. If you want to override <br>
<font color=navy><span style='color:navy'>>>></span></font>something,
then you need a setting for applicationId to do that. The <br>
<font color=navy><span style='color:navy'>>>></span></font>setting can
be in Apache space or in the RequestMap and the strong advice <br>
<font color=navy><span style='color:navy'>>>></span></font>is to do it
in Apache because that can't be circumvented. <br>
<br>
<font color=navy><span style='color:navy'><o:p></o:p></span></font></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>You said
not to use RequestMap because it is Apache. I</span></font><font color=navy><span
style='color:navy'>f each vhost/entityID has the same protected location (/),
then the only way I can see doing that is either in ApplicationDefaults or
separate Include files for each. Is there any other way?<o:p></o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'><br>
>2) I want each entityID to use the items that are defined in <br>
>ApplicationOverride, and any defaults not defined there. Will this <br>
>accomplish this please? <br>
<br>
Mostly. The documentation is the canonical source for how inheritance <br>
works. <br>
<br>
>3) Can I redefine anything in the ApplicationOverride that is allowed
the <br>
>default section? <br>
<br>
Yes. This is covered in the documentation. <br>
<br>
-- Scott <br>
<br>
-- <br>
To unsubscribe from this list send an email to <a
href="/user/SendEmail.jtp?type=node&node=7579905&i=1" target="_top" link="external" rel="nofollow">[hidden email]</a> <br>
<br>
<o:p></o:p></span></font></p>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=1 width="100%" noshade color="#cccccc" align=center>
</span></font></div>
<div>
<div>
<p class=MsoNormal><b><font size=1 color="#444444" face=Tahoma><span
style='font-size:9.0pt;font-family:Tahoma;color:#444444;font-weight:bold'>If
you reply to this email, your message will be added to the discussion below:<o:p></o:p></span></font></b></p>
</div>
<p class=MsoNormal><font size=1 color="#444444" face=Tahoma><span
style='font-size:9.0pt;font-family:Tahoma;color:#444444'><a
href="http://shibboleth.1660669.n2.nabble.com/Do-I-configure-multiple-Location-containers-if-all-vhosts-share-the-same-location-tp7579904p7579905.html" target="_top" rel="nofollow" link="external">http://shibboleth.1660669.n2.nabble.com/Do-I-configure-multiple-Location-containers-if-all-vhosts-share-the-same-location-tp7579904p7579905.html</a>
<o:p></o:p></span></font></p>
</div>
<div style='margin-top:4.8pt'>
<p class=MsoNormal style='line-height:18.0pt'><font size=1 color="#666666"
face=Tahoma><span style='font-size:8.5pt;font-family:Tahoma;color:#666666'>To
unsubscribe from Do I configure multiple Location containers if all vhosts
share the same location, <a
href="" target="_top" rel="nofollow" link="external">click
here</a>.<br>
<a
href="http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" target="_top" rel="nofollow" link="external"><font
size=1 face="Times New Roman"><span style='font-size:7.0pt;font-family:"Times New Roman"'>NAML</span></font></a>
<o:p></o:p></span></font></p>
</div>
</div>
<br/><hr align="left" width="300" />
View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/Do-I-configure-multiple-Location-containers-if-all-vhosts-share-the-same-location-tp7579904p7579906.html">RE: Do I configure multiple Location containers if all vhosts share the same location</a><br/>
Sent from the <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth - Users mailing list archive</a> at Nabble.com.<br/>