Kudzo ELO <
elok...@gmail.com> [2024-04-15 14:41 CEST]:
Note that you're exposing SimpleSAMLphp's base directory to the web
server that way, which is insecure. Instead only expose the 'public'
subdirectory to the web server.
> It seems like apache is not able to handle the url without ".php" at
> the end?
That's easy to test using any PHP file of your choice (e.g. one with
"<? phpinfo();" as its only content) and also completely independent
from SimpleSAMLphp.
(That's good for you since it also means that any answers you can find
on the web regarding PHP files not being processed/found/etc. will
also be applicable to your case, not only the very little information
that's specific to the SimpleSAMLphp software.)
Best,
-peter