Shibboleth Developers

[Velpi <>]

Hi

I finally got to testing the SP v2a. One major issue is currently giving 
me a headache: loading the module makes httpd hang in *all* -protected 
or not- CGI requests. I tried some gdb debugging 
(http://httpd.apache.org/dev/debugging.html): that gives me the 
information that something goes wrong right after it hits 
"ap_process_request". From there the process stops responding.

"normal" requests don't have this problem. Not loading the Shib2 module 
'fixes' the issue. The remote_user is being populated as expected.

environment: RHEL5, httpd2.2-worker, all installed using binary RPM's
using SAML1-Artifact


Another (probably silly) question: the new module uses the environment 
variables. Since I'm doing proxy'ing I need it to fill the headers. Is 
that an option that I missed or should that happen automatically? (it's 
not doing that with my current config)


The system I am using was running Shib1.3 without a hitch. Here's a 
simple description of my 'upgrade' path:
-----------------
#remove old shib packages, system keeps running, modified files are 
saved in .rpmsave (except for /etc/httpd/conf.d/shib.conf?), installed 
metadata files are not deleted
$ rpm -e <every-shib-related-rpm>

#install new packages; the old setup seemed to keep working without a 
hitch, although that is a little weird
$ rpm -ivh <every-shib2-rpm>

#configure shibboleth2.xml, attribute-map.xml (use 'old' metadata)

#restart the affected processes
$ service httpd restart
$ service shibd restart
-----------------


I like the new AFP concept, it already feels more right from the start. 
Looks like this is going to be another great piece of software...

-- Velpi