The mailing list for listmasters using Sympa

["Mail administrator, Otto Makela" <address@concealed>]

On 17/02/2022 16.11, Rhian Resnick wrote:

> I believe our Sympa instance is running with Shibboleth and EL8.

Summary from earlier: trying to make sympa-6.2.62-1 run on RHEL8.5 with
shibboleth-3.2.3-3.1. Sympa itself is working fine, but mysterious failure
of the SSO authentication system, never even attempting to contact the
SSO authentication provider.

I had a debugging session with one of our Shibboleth experts poring over the
configuration I've tried, and came to the conclusion that what is happening
is that the FastCGI configuration (using <Location /sympa>) is messing up the
authentication settings (which refer to <Location /sympa/sso_login/...>)

I suspect some work on the configuration is needed to get these two to
interact correctly. I have a feeling the authentication page documentation
predates this kind of FastCGI usage, and even the FastCGI page predates RHEL8?

https://sympa-community.github.io/manual/install/configure-http-server-spawnfcgi.html
https://sympa-community.github.io/manual/customize/authentication-web.html
 
Those of you who use Shibboleth and RHEL8, what httpd "front end" service
do you use, and if it is separate FastCGI, how did you configure it?

--
address@concealed (Mail Administrator, Otto J. Makela)