NativeSP in Windows with IIS7

[Zico]

On Thu, Dec 29, 2011 at 9:30 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> >
> >My blockers are:
> >
> >1. with "http://localhost/Shibboleth.sso/Status" .. I am getting "Status
> >Handler Blocked"
> >( here I got one thread on this topic:
> >
> http://shibboleth.1660669.n2.nabble.com/Status-Handler-Blocked-td3094182.h
> >tml
> >which says to append IP Address in acl, So I did:
> >
> ><Handler type="Status" Location="/Status" acl="127.0.0.1 localhost"/>
> >But, nothing changed!
>
> Names are not permitted, only addresses, so that won't do anything.
>

This is in my local Windows VM. So, there is no name but only localhost.
So, should I only include this?

<Handler type="Status" Location="/Status" acl="localhost"/>
?


>
> >2. in "shibd_warn" log: "CRIT Shibboleth.Application : no
> >MetadataProvider Available, configuration is probably unusable"
> >
> >( here my point is: in above "NativeSPWindowsIIS7Installer" link, there
> >is no indication for Metadata )
>
> Or attributes, or security settings, or any of a hundred other things.
> It's an Install page, not a complete document.
>
>
Do I even need a MetadataProvider for my "localhost" local SP too?


>  >3. in "native_warn" log: "ERROR Shibboleth.StatusHandler [2840]
> >isapi_shib_extension: status handler request blocked from invalid address
> >(::1)"
>
> If IPv6 works in that version, then you would have to add a V6 address to
> the ACL to compare against. You can file a RFE if you want the V6 address
> added to the configuration by default.
>
>
I am sorry but I can't understand how you all are pulling IPv6 here. There
is actually no possibility in my knowledge to use IPv6 in my internet
connectivity or even in my country. So... what should be other reasons of
this? :)

-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111229/bbd3241b/attachment.html