On Thu, Nov 15, 2012 at 4:21 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im"><br></div>
SNI is the obvious answer here but depends on what clients you need to<br>
support.<br>
<div class="im"><br></div></blockquote><div><br></div><div>yes, i've considered this ... client requirements are flexible, but i've been a bit trepidatious about moving to Apache 2.4 with Shib SP ... i've seen some bugs on the wiki that I'll need to find out impact to our environment</div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im"><br>
</div>Then the IdP would have failed with "No return endpoint available for<br>
relying party" or something like that. So probably we're not talking<br>
about the same thing.<br></blockquote><div><br></div><div>it did</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
But I'm not sure this would work the way I suggested anyway (i.e.,<br>
sharing cookies via a shared DNS domain and only establishing new<br>
sessions via 1 SSL-enabled vhost). It could be made to work with<br>
custom sessions not involving the SP, certainly.<br></blockquote><div><br></div><div>i guess this is more of my own ignorance and misunderstanding ... can i force the ACS value in the AuthNRequest to be</div><div><a href="https://defaultSSLvhost">https://defaultSSLvhost</a> when the client has initially visited <a href="http://nonSSLvhost">http://nonSSLvhost</a> ? </div>
<div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>