Uploads over SSL failing after SAML integration

[Aaron Howell]

Just a couple of thought - definitely not sure - hope it helps. 

I believe Safari sandboxes flash - maybe some session information is not passed across when under SSL

Or maybe the flash component only communicates on HTTP (in which case shibboleth might have the session only on https) or something like that. 

Sent from my iPhone

On 03/12/2012, at 10:38, "MikeWho" <who at me.com> wrote:

> We've just integrated Shibboleth SP into two of our sites, but unfortunately
> an upload issue has appeared on both sites: all uploads fail with an IO
> error when using Firefox or Safari (on Windows or Mac). Uploads with IE or
> Chrome (Windows & Mac) work fine. And the issue only occurs on SSL, if we
> configure the sites without SSL then uploads work on all browsers.
> 
> I wouldn't have thought Shibboleth could be a factor in this, but we
> transferred the site's files to a subfolder of another IIS site instance
> (which Shibboleth was never configured for) on the same server, and uploads
> worked perfectly there. i.e. the upload issue seems to be specific to the 2
> IIS sites that Shibboleth was configured for.
> 
> Has anyone had similar issues? Are there any Shibboleth configuration
> options specific to file uploads? Any security options which could be
> relaxed to help get uploads working again?
> 
> FYI, we use IIS, with a Flash front-end for uploading and a .Net back-end.
> Any advice/tips/pointers greatly appreciated!
> 
> 
> 
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/Uploads-over-SSL-failing-after-SAML-integration-tp7583430.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.