NativeSPRequestMapHost

The Shibboleth V2 IdP and SP software have reached End of Life and are no longer supported. This documentation is available for historical purposes only. See the IDP v4 and SP v3 wiki spaces for current documentation on the supported versions.

NativeSPRequestMapHost

The <Host> element is used to apply content rules to requests to a specific virtual host (or often to the two virtual hosts running on the default ports).

Attributes

Content Specifiers

  • name (string)

    • Required attribute, specifies the hostname of requests to match against. This must correspond to the "canonical" name of the virtual host, or the client can circumvent the matching process.

  • scheme ("http" or "https")

    • Optional scheme of requests to match against. Used to match only requests using a specific protocol. If omitted, any protocol will be matched.

  • port (integer)

    • Optional port of requests to match against. Used to match only requests using a specific port. If omitted, any request to the default port for the protocol used (either 80 or 443) will be matched.

Content Settings

XML attributes corresponding to request mapper properties are used.

Child Elements

Access Control

Nested Content Specifiers

Zero or more of these "overrides" to match specific content on the virtual host can be included.

  • <Path>

    • Matches requests whose first path component is an exact match for the element.

  • <PathRegex>

    • Matches requests with a path that matches the element's expression.

  • <Query>

    • Matches requests containing a query string parameter satisfying the element.

Matching is done within a <Host> element as follows:

1. First, by examining <Path> elements in order.
2. Then, by checking any <PathRegex> elements in order against the part of the path that was not matched in the first step.
3. Finally, by examining any <Query> elements in order.

Once a matching child element is found, the process steps "into" that element and no other siblings will be applied. Thus, siblings cannot overlap.

For more details on how the request mapping process works, see the request mapper HOWTO.