There are a number of URL path options that can be specified as options when running ipsilon-client-install. There are certain rules that must be followed to result in a valid mod_auth_mellon configuration:

• All path options must be prefixed with '/'.

• The mellon endpoint path (--saml-sp) must be a subpath of the httpd 'Location' elements is it contained within (--saml-base).

• The logout (--saml-sp-logout) and post (--saml-sp-post) paths must be subpaths of the mellon endpoint (--saml-sp).

We currently perform no validation of the above rules, which can cause us to write bad httpd configuration. Validation needs to be added.

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.