Config.json setting for simplesamlphp

[kapyaar]

Note: I have posted this on simplesamlphp as well, in the event someone in that group may have come across this use case.

Hi,

I am trying to implement simplesamlphp in docker running Nginx Unit. Unit requires a config.json for routing the requests. While I got the saml part worked out on an apache server, making it work on nginx unit is giving me some issues.

I tried the following entry in config.json

{
	  "match": {
		"uri": [
		  "*/sso/*",
		  "*/saml2/*",
		  "*/module.php/*",
		  "*/_/*"
		]
	  },
	  "action": {
		 "pass": "applications/simplesamlphp"
	  }
}

 "applications": {
    "php": {
      "type": "php",
      "root": "/var/www/html/",
	  "user": "root",
	  "processes": 10,
	  "index":"index.php"
    },
	"simplesamlphp": {
      "type": "php",
      "root": "/var/www/html/sso/public"
    }
  }

but If I go to http://localhost/sso/public/module.php/admin
It gets redirected to http://localhost/sso/public/module.php/core/loginuserpass?AuthState=_cb36948fe56949d22db3cd3ca13....... but
I am getting a 404. I am using identical config.php and authsources.php as what I have working on an apache server (without docker)

Any help/ guidance appreciated.

[ac000]

A couple of things

1. The php application isn't being used. So you can probably just remove it leaving only simplesamlphp
2. It looks like you might be wanting to use the script option

As an aside, if your root is /var/www/html/sso/public then I wouldn't expect to see /sso/public in the URL unless you really have /var/www/html/sso/public/sso/public...

[kapyaar]

Thanks @ac000 for the quick response. You are right, the root I entered was wrong, but I changed to /var/www/html, and still getting the same 404. I have my own php code (apart from sso), for which I do need the Application/php, correct?
Here is what the folder structure looks like

/var/www/html/
|-phpAppCode
|-sso-
         |-Public
         |-modules
         |-Other folders from simplesamlphp
|-other folders in my regular phpApp

I had already tried the share option, like
{
"match": {
"uri": [
"sso/*"
]
},
"action": {
"share": "/var/www/html$uri"
}
},

In addition, I tried a whole lot of suggestions from chatgpt, but getting the same error. It looks like, the saml library works by loading modules, like localhost/sso/public/module.php/core/welcome for example. I am not sure if the config.json entry is handling the parameters correctly? The fact is, If I simply do
http://localhost/sso/public/module.php/

It does load an error page with the message
No PATH_INFO to module.php The URL was: http://localhost/sso/public/module.php

To me it looks like the php part is getting handled ok, but the part after module.php/ is not getting handled properly?

[ac000]

I have my own php code (apart from sso), for which I do need the Application/php, correct?

You have two applications defined, php & simplesamlphp. AFAICS php is not used.

I had already tried the share option, like

The share option would be for any static items you need serve.

Like I said, maybe you need to use the script option... e.g.

"root": "/path/to/php/app",
"script": "module.php",