NativeSP in Windows with IIS7

[Cantor, Scott]

>
>My blockers are:
>
>1. with "http://localhost/Shibboleth.sso/Status" .. I am getting "Status
>Handler Blocked"
>( here I got one thread on this topic:
>http://shibboleth.1660669.n2.nabble.com/Status-Handler-Blocked-td3094182.h
>tml
>which says to append IP Address in acl, So I did:
>
><Handler type="Status" Location="/Status" acl="127.0.0.1 localhost"/>
>But, nothing changed!

Names are not permitted, only addresses, so that won't do anything.

>2. in "shibd_warn" log: "CRIT Shibboleth.Application : no
>MetadataProvider Available, configuration is probably unusable"
>
>( here my point is: in above "NativeSPWindowsIIS7Installer" link, there
>is no indication for Metadata )

Or attributes, or security settings, or any of a hundred other things.
It's an Install page, not a complete document.

>3. in "native_warn" log: "ERROR Shibboleth.StatusHandler [2840]
>isapi_shib_extension: status handler request blocked from invalid address
>(::1)"

If IPv6 works in that version, then you would have to add a V6 address to
the ACL to compare against. You can file a RFE if you want the V6 address
added to the configuration by default.

-- Scott