Fixes to get SSO 401 working.

global/overlay/etc/puppet/modules/soc/templates/sso/apache-site.conf.erb

@@ -27,12 +27,14 @@
     # after it has been globally disabled with "a2disconf".
     #Include conf-available/serve-cgi-bin.conf
 
-    Alias /error /var/www/error
+    Alias /.ssoerror /var/www/ssoerror
-    <Directory /var/www/error>
+    <Directory /var/www/ssoerror>
+        Satisfy any
+        Allow from all
         AuthType None
 	Require all granted
     </Directory>
-    ErrorDocument 401 /error/401.html
+    ErrorDocument 401 /.ssoerror/401.html
 
     <Location />
         AuthType shibboleth
@@ -69,7 +71,7 @@
     </Location>
     <%- end -%>
 
-    ProxyPass "/error" !
+    ProxyPass "/.ssoerror" !
     ProxyPass "/" "<%= @service_endpoint %>/"
     ProxyPassReverse "/" "<%= @service_endpoint %>/"
     UseCanonicalName On

global/overlay/etc/puppet/modules/soc/templates/sso/docker-compose.yml.erb

@@ -23,7 +23,7 @@ services:
 <% end -%>
       - ./shibboleth/sp-cert.pem:/etc/shibboleth/sp-cert.pem
       - ./shibboleth/sp-key.pem:/etc/shibboleth/sp-key.pem
-      - ./apache/401.html:/var/www/error/401.html:ro
+      - ./apache/401.html:/var/www/ssoerror/401.html:ro
 <% if @extra_proxy_conf -%>
       - <%= @extra_proxy_conf %>:<%= @extra_proxy_conf %>
 <% end -%>