Uploads over SSL failing after SAML integration

[MikeWho]

Thanks Christopher & Scott for the suggestions.

Bingo! I tried the redirect on the Authentication page, and then tried an
upload and it worked perfectly. To add a little confusion, one of the sites
(an internal staging site) has a self-signed certificate which causes Flash
uploads to fail on the same browsers, but once that certificate was set to
always be trusted, it's working perfectly; verified in Safari and Firefox on
both Windows and Mac.

One final question - now that Authentication.aspx has requireSession =
false; is it still safe from spoofing? Does Shibboleth still clear the
headers to prevent this (the only header we're reading is the user identity
from the HTTP_REMOTEUSER field).

So, lessons learned. Don't use SSO on uploads scripts where Flash and SSL is
involved, and don't use self-signed certificates on Flash sites that have an
upload feature.

Many, many thanks for the assistance all. Greatly appreciated.
Mike.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Uploads-over-SSL-failing-after-SAML-integration-tp7583430p7583477.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.