<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div>I am experiencing problems using SSI includes on some virtual hosts, which seems to be related in some way to my ShibSP configuration. I am using Apache 2.4.4, Shib SP 2.5.1.</div><div><br></div><div>My Shibboleth2.xml config(sanitised to remove domain names) is included at the end. I have a number of virtual hosts in Apache, each of these that requires shib authentication is configured with an application override:</div><div><ApplicationOverride id="service2" entityID="https://service2.domain.com/shibboleth"/></div><div>Server Side Includes (SSI) work fine on virtual-hosts I've configured to use Shib authentication. virtual-hosts that have not been configured to use Shib authentication work in general, but SSI's fail (apache error log messages below).</div><div><br></div><div>All my Shib configuration in Apache, is contained within virtual hosts (not done anything globally). Is there something I need to do to explicitly disable Shib on a virtual host that doesn't need it?</div><div><br></div><div>Any thoughts / advice on how to solve or debug this further would be greatly appreciated.</div><div>Thanks,</div><div>Paul</div><div><br></div><div>Apache Error Log:</div><div><br></div><div>[Thu Jul 11 08:59:54.084076 2013] [mod_shib:error] [pid 64992:tid 140036716484352] [client XXX.XXX.XXX.XXX:51502] shib_handler found no per-request structure</div><div>[Thu Jul 11 08:59:54.084119 2013] [include:error] [pid 64992:tid 140036716484352] [client XXX.XXX.XXX.XXX:51502] unable to include "./header.htm" in parsed file /apache/content/error/503.err, subrequest returned 500</div><div>[Thu Jul 11 08:59:54.084362 2013] [mod_shib:error] [pid 64992:tid 140036716484352] [client XXX.XXX.XXX.XXX:51502] shib_handler found no per-request structure</div><div>[Thu Jul 11 08:59:54.084392 2013] [include:error] [pid 64992:tid 140036716484352] [client XXX.XXX.XXX.XXX:51502] unable to include "./footer.htm" in parsed file /apache/content/error/503.err, subrequest returned 500</div><div><br></div><div><br></div><div>Apache include config:</div><div><br></div><div>ErrorDocument 404 /error/404.err</div><div>ErrorDocument 503 /error/503.err</div><div><Location /error></div><div> Options IncludesNOEXEC</div><div> AddType text/html .err</div><div> AddOutputFilter INCLUDES .err</div><div></Location></div><div><br></div><div><br></div><div>ShibSP Config:</div><div><SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"</div><div> xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"</div><div> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"</div><div> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"</div><div> xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"</div><div> clockSkew="180"></div><div><br></div><div> <ApplicationDefaults entityID="https://service1.domain.com/shibboleth"</div><div> REMOTE_USER="username"></div><div> <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"</div><div> checkAddress="false" handlerSSL="true" cookieProps="https"></div><div><br></div><div> <SSO entityID="https://login.domain.com/entity"></div><div> SAML2</div><div> </SSO></div><div><br></div><div> <Logout>SAML2 Local</Logout></div><div><br></div><div> <Handler type="MetadataGenerator" Location="/Metadata" signing="false"/></div><div><br></div><div> <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/></div><div><br></div><div> <Handler type="Session" Location="/Session" showAttributeValues="false"/></div><div><br></div><div> <Handler type="DiscoveryFeed" Location="/DiscoFeed"/></div><div> </Sessions></div><div><br></div><div> <Errors supportContact="help@domain.com"</div><div> helpLocation="/about.html"</div><div> styleSheet="/shibboleth-sp/main.css"/></div><div><br></div><div> <MetadataProvider type="XML" uri="https://login.domain.com/entity"</div><div> backingFilePath="testlogin-metadata.xml" reloadInterval="7200"></div><div> </MetadataProvider></div><div><br></div><div> <AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map.xml"/></div><div><br></div><div> <AttributeResolver type="Query" subjectMatch="true"/></div><div><br></div><div> <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/></div><div><br></div><div> <CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/></div><div><br></div><div> <!-- Additional Applications : vhosts --></div><div> <ApplicationOverride id="service2" entityID="https://service2.domain.com/shibboleth"/></div><div> <ApplicationOverride id="service3" entityID="https://service3.domain.com/shibboleth"/></div><div> <ApplicationOverride id="service4" entityID="https://service4.domain.com/shibboleth"/></div><div><br></div><div> </ApplicationDefaults></div><div><br></div><div> <SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/></div><div><br></div><div> <ProtocolProvider type="XML" validate="true" reloadChanges="false" path="protocols.xml"/></div><div><br></div><div></SPConfig></div><div><br></div><div><br></div><div><br></div><div><br></div> </div></body>
</html>