NativeSP in Windows with IIS7

[Rod Widdowson]

So, I’m no "SP on Windows" expert but...

I’m guessing that 1 & 3 are two sides of the same coin.  It looks to me as though you are approaching the SP in IPV6, so try adding an appropriate IPV6 ACL.

For (2) you are now in the realms of general SP configuration -

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted is a good place to start:

"
   Supply or link to at least one IdP's metadata using one or more <MetadataProvider> elements.
"

Also be aware that during configuration you can get check the configuration by running "shibd -check" (https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPshibd) that will save you the whole IIS overhead.

> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Zico
> Sent: 29 December 2011 10:01
> To: users at shibboleth.net
> Subject: NativeSP in Windows with IIS7
> 
> Hi,
> 
> I am trying to install NativeSP in Windows with IIS7.
> 
> I am following this fantastic
> doc: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPWindowsIIS7Installer
> 
> I went through general installation procedure:
> 
> 1. IIS7 installation 2. ISAPI Filter installation 3. *.sso mapping in ISAPI filter and so on.
> 
> But, I am getting couple of blockers, I guess I am making some mistakes somewhere but can't understand
> what are those.
> 
> My blockers are:
> 
> 1. with "http://localhost/Shibboleth.sso/Status" .. I am getting "Status Handler Blocked"
> ( here I got one thread on this topic: http://shibboleth.1660669.n2.nabble.com/Status-Handler-Blocked-
> td3094182.html
> which says to append IP Address in acl, So I did: <Handler type="Status" Location="/Status"
> acl="127.0.0.1 localhost"/> But, nothing changed!
> 
> 2. in "shibd_warn" log: "CRIT Shibboleth.Application : no MetadataProvider Available, configuration is
> probably unusable" ( here my point is: in above "NativeSPWindowsIIS7Installer" link, there is no
> indication for Metadata )
> 
> 3. in "native_warn" log: "ERROR Shibboleth.StatusHandler [2840] isapi_shib_extension: status handler
> request blocked from invalid address (::1)"
> 
> 
> What should be my next step? Any suggestion?
> --
> Best,
> Zico