Install/Configuration/Run Errors

Thu Jan 19 02:41:40 GMT 2012

What browser are you using when you test it?

Sorry for what might seem to be silly questions - just trying to help...

________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Johnson, Roger [BSD] - HSD [rogermct at uchicago.edu]
Sent: Wednesday, January 18, 2012 8:32 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

>From Native_Warn.log:
2012-01-18 18:26:03 ERROR Shibboleth.ISAPI [2764] isapi_shib_extension:
Error reading request body from browser (2746).
2012-01-18 18:26:06 ERROR Shibboleth.Listener [2764]
isapi_shib_extension: remoted message returned an error: Invalid HTTP
method (GET).
2012-01-18 18:26:06 ERROR Shibboleth.ISAPI [2764] isapi_shib_extension:
Invalid HTTP method (GET).

FROM native.log:
2012-01-18 18:26:03 ERROR Shibboleth.ISAPI [2764] isapi_shib_extension:
Error reading request body from browser (2746).
2012-01-18 18:26:06 ERROR Shibboleth.Listener [2764]
isapi_shib_extension: remoted message returned an error: Invalid HTTP
method (GET).
2012-01-18 18:26:06 ERROR Shibboleth.ISAPI [2764] isapi_shib_extension:
Invalid HTTP method (GET).

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Johnson, Roger [BSD] - HSD
Sent: Wednesday, January 18, 2012 8:25 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

Hey,

There is no proxy.  In fact, the box has a LIVE IP Address.

I've tried to eliminate all possibilities.

Things I have removed as issues:
- Domain (fresh install - not joined to domain)
- Domain Group Policy (no domain policy applied)
- Control Access (removed win2008 advanced security)
- Account Shibboleth runs under (set to run as local administrator)
- URL Rewrite module (removed)
- Changed from Win2008 Web Edition to Win2008 Standard Edition
- IIS Pool account running under Local Admin account

I am currently working on a box that isn't joined to the domain, has no
group policies, has access control turned off, and has all IIS features
installed.

I'm still not able to get it to work.

The weird part is, it works on my local Windows7 box but I can't get it
to work on Windows 2008.

I AM WILLING TO TRY ANYTHING!   I DO HAVE MY SOUL TO SELL.

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Caskey, Paul
Sent: Wednesday, January 18, 2012 7:41 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

Roger-

Could this possibly be related to a web proxy messing with your POST
data?  Do you all even use a web proxy?

Are there any load balancers or any other security devices or software
in between you and IIS?

When all other explanations fail, blame the security stuff.  :)

________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on
behalf of Johnson, Roger [BSD] - HSD [rogermct at uchicago.edu]
Sent: Wednesday, January 18, 2012 3:25 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

Could this be a problem with our Authentication Server?  Is that even
possible?    I know it is working with Apache servers.

On my fresh install box, with no add-ins, no domain, no network
in-between, and no other sites, it doesn't work.  I'm sure it's not IIS
because as Scott stated, OSU has several and they all work fine.  I have
tried Win2008 Web Edition, Win2008 R2 Web Edition, and Win2008 R2
Standard Edition.

Sorry, I know I'm just shooting in the dark to figure this out.

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Cantor, Scott
Sent: Wednesday, January 18, 2012 2:53 PM
To: users at shibboleth.net
Subject: Re: Install/Configuration/Run Errors
Importance: High

On 1/18/12 3:41 PM, "Johnson, Roger [BSD] - HSD" <rogermct at uchicago.edu>
wrote:

>Clean install with no secondary modules.
>Box is NOT joined to Domain.
>
>Error: isapi_shib_extension: Error reading request body from browser
>(2746)
>
>Any Ideas?

No. I can't explain how everything you're trying fails, other than to
say something in your environment has to be involved. Not unless others
are suddenly seeing this problem on every server they install, and I
know that's not the case here at OSU. IIS is very prevalent here.

I don't have time to do a straight install at the moment, but perhaps
you can find a fresh set of eyes that has done an install and see if
there's some sort of documentation issue leading you down a bad path
somewhere...

-- Scott

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this email message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this email in error, please notify the sender and destroy/delete all copies of the transmittal. Thank you.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net