...
- UseCanonicalName On
ServerName:Port
set to the scheme, ServerName and Port of the Apache Proxy Proxy, see http://httpd.apache.org/docs/2.2/en/mod/core.html#servername
even though the servername is actuallyCode Block ServerName https://mainsite.example.org:443
backend.example.org
and is only serving HTTP on port 80.setShibURLScheme https
(see SPProtectionConfig) for the server (e.g. somewhere inhttpd.conf
)
shibboleth.xml
- set
Hostname
inRequestMap
to "mainsite.example.org
", ignorescheme
andport
. - in
Applications
->Sessions
set (or leave the default)handlerURL="/Shibboleth.sso"
and sethandlerSSL="true"
...