Shibboleth Developers

[Ian Young <>]

Velpi wrote:

> I finally got to testing the SP v2a. One major issue is currently giving
> me a headache: loading the module makes httpd hang in *all* -protected
> or not- CGI requests. I tried some gdb debugging
> (http://httpd.apache.org/dev/debugging.html): that gives me the
> information that something goes wrong right after it hits
> "ap_process_request". From there the process stops responding.
> 
> "normal" requests don't have this problem. Not loading the Shib2 module
> 'fixes' the issue. The remote_user is being populated as expected.
> 
> environment: RHEL5, httpd2.2-worker, all installed using binary RPM's
> using SAML1-Artifact

I ran into the same issue on CentOS 5, which is the same thing really:

        https://bugs.internet2.edu/jira/browse/SSPCPP-17

You can work round this one by switching from mod_cgi to mod_cgid:

Change
LoadModule cgi_module modules/mod_cgi.so
to
LoadModule cgid_module modules/mod_cgid.so

When I did this, I ran into other problems because by default, the
mod_cgid wants to create a socket in the logs directory, which is to say
the equivalent of:

        ScriptSock logs/cgisock

You can work round *that* either by granting more permissions to the
Apache logs directory or by using an explicit ScriptSock to point
somewhere else.

        -- Ian