I did the experiment and it is confirmed:<div><br></div><div><div>LoadModule mod_shib ...</div><div><br></div><div>MUST appear before any other LoadModule that captures requests (including mod_passenger, and I suspect mod_php, etc) or it will NOT capture /Shibboleth.sso/ interactions.</div>
<div><br></div><div>Thanks again for the help, and please do whatever you can to help spread the word.</div><div><br></div><div>Implementing Shibboleth just shortened my life by a year through increased stress.</div><div>
<br></div><div>Ken</div><div><br></div><br><div class="gmail_quote">On Fri, Oct 5, 2012 at 5:39 PM, Ken Demarest <span dir="ltr"><<a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Robert, you are my hero.<div><br></div><div>I can't tell you how many hours of my life I'll never get back over this problem.</div>
<div><br></div><div>It solved it, but it seems like a bit of a hack. Why should it work sometimes, and not others?</div>
<div><br></div><div>Perhaps it is the module load order, and mod_passenger is "getting in line" before mod_shib.</div><div><br></div><div>I'm going to find out.</div><span class="HOEnZb"><font color="#888888"><div>
<br></div><div>Ken</div></font></span><div><div><div class="h5"><br><div class="gmail_quote">
On Fri, Oct 5, 2012 at 1:45 PM, Robert A Basch <span dir="ltr"><<a href="mailto:rbasch@mit.edu" target="_blank">rbasch@mit.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
We had an SP with a similar issue a while back, and the solution was to add the<br>
following to the Apache config:<br>
<br>
<Location /Shibboleth.sso><br>
PassengerEnabled off<br>
</Location><br>
<br>
Bob<br>
<div><div><br>
<br>
On Oct 5, 2012, at 2:30 PM, Peter Schober wrote:<br>
<br>
> * Ken Demarest <<a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a>> [2012-10-05 18:24]:<br>
>> it appears that mod_shib is not intercepting the url, and I'm passed<br>
>> through to my (Rails Passenger) application, which of course<br>
>> responds that it can't find the file.<br>
><br>
> Then stop your mod_rails from also eating ^/Shibboleth.sso<br>
><br>
> With some configurations in the past I had to set someting like<br>
> <Location "/Shibboleth.sso"><br>
> SetHandler shib-handler<br>
> </Location><br>
> in order to reclaim the request uri from some other handler possibly<br>
> set to <Location "/"> SetHandler foobar etc.<br>
> -peter<br>
> --<br>
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><div class="im">-- <br><div><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________</span><span style="font-size:3pt;font-family:Arial,sans-serif;color:gray"><br>
</span><b><span style="font-size:9pt;font-family:Arial,sans-serif;color:gray">Ken Demarest </span></b><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><br>Founder and President <br></span><b><span style="font-size:8pt;font-family:Arial,sans-serif"><font color="#66cccc">JEESTY ENDEAVOR [ j. ]</font></span></b></div>
<span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a></span><div><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><a href="tel:415.342.9731" value="+14153429731" target="_blank">415.342.9731</a><br>
Austin, Texas ▪ United States </span><span style="font-size:4pt;font-family:Arial,sans-serif;color:gray"><br>__________________________________________________________________________________</span></div><br>
</div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________</span><span style="font-size:3pt;font-family:Arial,sans-serif;color:gray"><br>
</span><b><span style="font-size:9pt;font-family:Arial,sans-serif;color:gray">Ken Demarest </span></b><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><br>Founder and President <br></span><b><span style="font-size:8pt;font-family:Arial,sans-serif"><font color="#66cccc">JEESTY ENDEAVOR [ j. ]</font></span></b></div>
<span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a></span><div><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray">415.342.9731<br>
Austin, Texas ▪ United States </span><span style="font-size:4pt;font-family:Arial,sans-serif;color:gray"><br>__________________________________________________________________________________</span></div><br>
</div>