IIS ignores shibd

Liam Hoekenga liamr at umich.edu
Tue Nov 15 14:32:07 GMT 2011


Try adding a directory to your document root named Shibboleth.sso (not  
a virtual directory, an actual directory).

Someone had suggested that they'd needed that to make shib + SharePoint work.
I needed to that to get IIS7 + shib + some product by BlackBaud  
working together.

Liam


Quoting Jukka Hakosalo <jhakosal at gmail.com>:

> I use IIS7 for the first time. I have problems with Shibboleth SP 2.4.
> In server there is a site 'site1.city.fi'.
> Under that site there is a folder 'testfolder'. In the folder there is
> 'testpage.html'.
>
> Shibd starts ok and 'shibd -check' says:
> 'ovarall configuration is loadable, check console for non-fatal problems'
>
> Browser let's me go directly to
> 'https://site1.city.fi/testfolder/testpage.html' without asking
> anything.
> 'https://site1.city.fi/tesfolder' is the path i try to shibbolize.
>
> Our idp is working well with many other SPs. Metadatas should be ok.
>
> Nothing comes to shib.log. Here are some parts from shibboleth2.xml:
>
> <ISAPI normalizeRequest="true" safeHeaderNames="true">
>   <Site id="1" name="site1.city.fi"/>
> </ISAPI>
> ..
> ..
> <TCPListener address="127.0.0.1" port="1600" acl="127.0.0.1"/>
> ..
> ..
> <RequestMapper type="Native">
>    <RequestMap>
>      <Host name="site1.city.fi" redirectToSSL="443">
>         <Path name="testfolder" authType="shibboleth" requireSession="true"/>
>      </Host>
>    </RequestMap>
> </RequestMapper>
> ..
> ..
> <ApplicationDefaults entityID="https://site1.city.fi/shibboleth-sp"
>                      homeURL="https://site1.city.fi"
>                      REMOTE_USER="eppn">
>
> ..
> ..
> <SSO entityID="https://idp.city.fi/idp/shibboleth">
>      SAML2 SAML1
> </SSO>
> ..
> ..
> Shibd finds certificates, metadata, attribute-map and other files.
>
> IIS totally ignores shibboleth. ISAPI Filter seems to be ok.
> I think that the problem is in IIS. With Apache i've never had these
> kind of difficulties.
> Can someone help?
> --
> To unsubscribe from this list send an email to  
> users-unsubscribe at shibboleth.net
>
> !DSPAM:4ec13d4e115821804284693!
>
>
>
>




More information about the users mailing list