Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: apache >= 2.1

...

The Shibboleth module needs to be informed that the information it's receiving from the web server has been altered by the deployment environment to handle SSL load balancers/accelerators properly. This can be done for Apache by specifying

  • Apache httpd: For older versions of Apache httpd (up to 2.0) you can specify ShibURLScheme https within the appropriate <VirtualHost> in httpd.conf. For current releases (from httpd 2.1 on) the scheme is given as part of the ServerName directive, e.g.
    Code Block
    
    ServerName https://sptest.tut.fi:443
    UseCanonicalName On
    
  • For IIS, this must be specified directly in shibboleth.xml by modifying the <Site> element:
    Code Block
    xml
    xml
    
    <Implementation>
    	<ISAPI normalizeRequest="true">
    		<Site id="1" name="sptest.tut.fi" scheme="https"/>
    	</ISAPI>
    </Implementation>