<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi Scott,
<div class=""><br class="">
</div>
<div class="">Did a little more digging and reading and my primary issue is</div>
<div class="">
<h3 style="color: rgb(0, 51, 102); font-size: 16px; margin: 1.3em 0px 0.4em; padding: 0px; font-family: Arial, Helvetica, sans-serif;" class="">
<a name="overlapping-webspace" id="overlapping-webspace" style="color: inherit;" class="">Overlapping Webspace</a></h3>
<p style="margin: 0px 0px 1em; line-height: 1.3em; padding: 0px; color: rgb(0, 51, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px;" class="">
In order to have two overlapping URLs one has to consider the order in which certain sections or directives are evaluated. For<code class="directive" style="font-family: 'Courier New', Courier, monospace; font-size: 1em; color: rgb(40, 127, 0);"><a href="http://httpd.apache.org/docs/current/mod/core.html#location" style="color: rgb(53, 165, 0);" class=""><Location></a></code> this
would be:</p>
<pre class="lang-config prettyprinted prettyprint" style="font-family: 'Courier New', Courier, monospace; padding: 0.5em; border: none; tab-size: 4; overflow-x: auto; overflow-y: hidden; background-color: rgb(229, 236, 243); margin: 1em 2em 1em 1em; font-size: 14px;"><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="tag" style="color: rgb(136, 34, 17); font-weight: bold;">Location</span><span class="pln"> </span><span class="str" style="color: rgb(0, 102, 0);">"/foo"</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln">
</span><span class="pun" style="color: rgb(102, 102, 0);"></</span><span class="tag" style="color: rgb(136, 34, 17); font-weight: bold;">Location</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln">
</span><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="tag" style="color: rgb(136, 34, 17); font-weight: bold;">Location</span><span class="pln"> </span><span class="str" style="color: rgb(0, 102, 0);">"/foo/bar"</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln">
</span><span class="pun" style="color: rgb(102, 102, 0);"></</span><span class="tag" style="color: rgb(136, 34, 17); font-weight: bold;">Location</span><span class="pun" style="color: rgb(102, 102, 0);">></span></pre>
<div class=""><span class="pun"><br class="">
</span></div>
<div class=""><span class="pun">After moving my location directive around I started getting</span></div>
<div class=""><span class="pun"><br class="">
</span></div>
<div class=""><span class="pun"><b class="">AH01629: authorization failure (no authenticated user): /secure/</b></span></div>
<div class=""><span class="pun"><br class="">
</span></div>
<div class="">I changed /secure to what’s below and it works now. I </div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><Location /></div>
<div class=""> AuthType shibboleth</div>
<div class=""> ShibRequireSession Off</div>
<div class=""> ShibUseHeaders On</div>
<div class=""> Require shibboleth</div>
<div class=""></Location></div>
<div class=""><br class="">
</div>
<div class=""><Location /secure></div>
<div class=""> AuthType shibboleth</div>
<div class=""> ShibRequireSession On</div>
<div class=""> ShibUseHeaders On</div>
<div class=""></Location></div>
</div>
<div class=""><span class="pun"><br class="">
</span></div>
<div class=""><span class="pun">Hope this helps anyone else that hits this problem.</span></div>
<div class=""><span class="pun"><br class="">
</span></div>
<div class=""><span class="pun"><br class="">
</span></div>
<div class=""><span class="pun">-Chris</span></div>
<div class=""><span class="pun" style="color: rgb(102, 102, 0);"><br class="">
</span></div>
<div>
<blockquote type="cite" class="">
<div class="">On Nov 14, 2017, at 10:03 AM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">
<blockquote type="cite" class="">I didn’t set up a different Session Initiator so I don’t think I need<br class="">
requireSessionWith. I also didn’t set up a RequestMap thinking I should be<br class="">
able to accomplish this in the shib.conf file.<br class="">
</blockquote>
<br class="">
Location settings merge in very complex ways, I would imagine you're seeing the effect of that. I believe Location / will usually trump just about everything.<br class="">
<br class="">
-- Scott<br class="">
<br class="">
-- <br class="">
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" class="">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br class="">
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">
users-unsubscribe@shibboleth.net</a></div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>