Configuring IIS for 1 SP, multiple domains

[Anna Maurer]

I'm looking at native.log on DEBUG now - any lines I should be focusing on?
There are no WARNs or CRITs or ERRORs, and any lines mentioning the second
site look just like the others.

I'm reworking the shib2.xml file to give my computer access to
/Shibboleth.sso/Status.

Thanks,

Anna

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Cantor, Scott
Sent: Wednesday, August 24, 2011 14:49
To: users at shibboleth.net
Subject: Re: Configuring IIS for 1 SP, multiple domains

On 8/24/11 5:38 PM, "Anna Maurer" <annam at berkeley.edu> wrote:
>
>--I was almost positive it wasn't an SP issue directly, but more an 
>IIS/SP configuration issue. These two domains have co-existed in this 
>fashion for over two years. It's only with the SP that they are behaving
differently.
>I
>think there's a configuration setting somewhere in the IIS or Load 
>Balancer config files relating to this issue, but have no idea what. --

I would guess the filter is not loaded or working for the second site. I
think you should start by seeing what native.log says on DEBUG for the
second site.

>No idea what that means (and "shibboleth.sso" will never work).
>
>-- I loaded https://basicsite.example.com/shibboleth.sso and 
>https://site.othersite.com/shibboleth.sso and got " ISAPI extension can 
>only be invoked to process Shibboleth protocol requests. Make sure the 
>mapped file extension doesn't match actual content.".  I knew this 
>wouldn't do anything, but I was curious and running out of ideas on 
>things to check. I was collecting data for more research.--

That means the extension and script mapping are working for the sites.
/Shibboleth.sso/Status should work for both sites as a result.

-- Scott

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net