<div dir="ltr">Oh yes, Peter. I forgot to mention... yes, I am configuring Logical SP ( that /sample1 ). </div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Jun 8, 2014 at 6:11 AM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Zico <<a href="mailto:mailzico@gmail.com">mailzico@gmail.com</a>> [2014-06-08 13:02]:<br>
<div class="">> You don't have permission to access<br>
> /sample1/Shibboleth.sso/SAML2/POST on this server<br>
<br>
</div>The Shibboleth SP's content handler (Shibboleth.sso) cannot and should<br>
not be part of the protected content itself, as that doesn't make any<br>
sense, of course. But instead of fixing that problem via httpd<br>
directives (allowing all access to that REQUEST_URI) I'd ask why you<br>
even end up with such a URL?<br>
So even get a SAML IDP to try to post to that location you must have<br>
changed the SP's metadata to move all references to<br>
<a href="https://your.example.org/Shibboleth.sso/." target="_blank">https://your.example.org/Shibboleth.sso/.</a>.. to<br>
<a href="https://your.example.org/sample1/Shibboleth.sso/." target="_blank">https://your.example.org/sample1/Shibboleth.sso/.</a>..<br>
What gave you the impression you had to do this?<br>
<br>
The only case one ever has to do something like this is if you need to<br>
use an ApplicationOverride in order create logically seperate<br>
("virtual") SPs on the same vhost. That is a very uncommon requirement<br>
so unless you clearly state your use case I'd assume that this is not<br>
what you actually want.<br>
<br>
Short version: Undo all the changes you did to change the handlerURL<br>
(and in SAML metadata you gave toe IDP) and try again.<br>
-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Best,<br>Zico
</div>