<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div dir="ltr">
<div><font face="monospace">Hello,</font></div>
<div><font face="monospace"> we have idp v4.1.6 and sp v3.2.3.
In our Apache vh config file:<br>
<br>
</font></div>
<div><span style="font-family:monospace">--</span></div>
<div><font face="monospace"><Location /><br>
</font></div>
<font face="monospace"> AuthType shibboleth<br>
ShibRequestSetting requireSession true<br>
Require shib-session<br>
</Location><br>
<br>
RewriteCond %{LA-U:REMOTE_USER} .+<br>
RewriteRule ^/(.*) <a class="moz-txt-link-freetext"
href="https://.../$1" moz-do-not-send="true">https://.../$1</a>
[R,L]<br>
</font>
<div><font face="monospace">--</font></div>
<div><font face="monospace"><br>
</font></div>
<div><font face="monospace">The two goals are:</font></div>
<div><font face="monospace"> [major] redirect only auth'ed user to
another (external) url<br>
</font></div>
<div><font face="monospace"> [minor] curl the metadata: curl
https://<vh>/Shibboleth.sso/Metadata</font></div>
<div><font face="monospace"><br>
</font></div>
<div><font face="monospace">Two problems:</font></div>
<div><font face="monospace"> - </font><span
style="font-family:monospace">[major] I have two warn/err
messages for each authentication:</span></div>
<div><font face="monospace"> - in shibd(_warn).log:</font></div>
<div><font face="monospace"> <i>WARN Shibboleth.SSO.SAML2 [21]
[default]: error processing incoming assertion: Invalid HTTP
method (GET)</i><br>
</font></div>
<div><font face="monospace"> - in Apache error_log:</font></div>
<div><font face="monospace"> <i>[mod_shib:error] [...] Invalid
HTTP method (GET)., referer: </i><i><a
href="https://idp.unibocconi.it/" moz-do-not-send="true">https://idp...it/</a></i><br>
</font></div>
<div><font face="monospace"> - [minor] curl returns bad metadata
(two concatenated output) when the</font></div>
<div><font face="monospace"> RewriteCond/Rule is present (it's
ok without the rules)</font></div>
<div><font face="monospace"><br>
</font></div>
<div><font face="monospace">Thanks in advance.</font></div>
<div><font face="monospace">Marco.</font><br>
</div>
</div>
<pre class="moz-signature" cols="72">--
% Marco Broglia
% via per Vimodrone 9, 20093 Cologno Monzese (MI)
% email: <a class="moz-txt-link-abbreviated moz-txt-link-freetext" href="mailto:marco.broglia@mutex.it" moz-do-not-send="true">marco.broglia@mutex.it</a>
</pre>
</body>
</html>