Install/Configuration/Run Errors

Thu Jan 19 03:34:38 GMT 2012

-Uninstalled Shibboleth
-Installed 32bit version
-Configured Application pool to run as 32bit mode
-restarted box
-tried again - Same Error

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Johnson, Roger [BSD] - HSD
Sent: Wednesday, January 18, 2012 9:22 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

I'm going to try Scotts 32bit try.

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Johnson, Roger [BSD] - HSD
Sent: Wednesday, January 18, 2012 9:18 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

Ignore my last message.  I figured out the problem.

It happens when I try logging in from the non-https.

Roger Johnson
University of Chicago

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of David Langenberg
Sent: Wednesday, January 18, 2012 9:13 PM
To: Shib Users
Subject: Re: Install/Configuration/Run Errors

Hi Paul

We've tried both IE and Google Chrome. Mac, Windows makes no difference.

David Langenberg
Identity Management
The University of Chicago 

On Jan 18, 2012, at 7:52 PM, "Caskey, Paul" <pcaskey at utsystem.edu>
wrote:

> But when you access it, are you by any chance only using IE?
> 
> 
> 
> I was just curious if you had tried another browser - firefox or
whatever.
> 
> 
> 
> 
> 
> 
> 
> ________________________________
> From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on 
> behalf of Johnson, Roger [BSD] - HSD [rogermct at uchicago.edu]
> Sent: Wednesday, January 18, 2012 8:44 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
> Its an ASP.NET site, but the /secure directory (which is what 
> Shibboleth is reacting too) is a single ASP.NET page that simply 
> returns to the page all the headers. Later it will create a 
> FormsSession with the user identity returned by Shibboleth.
> 
> 
> Roger Johnson
> University of Chicago
> 
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net
> [mailto:users-bounces at shibboleth.net]
> On Behalf Of Caskey, Paul
> Sent: Wednesday, January 18, 2012 8:42 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
> What browser are you using when you test it?
> 
> 
> 
> Sorry for what might seem to be silly questions - just trying to
help...
> 
> 
> 
> 
> 
> ________________________________
> From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on 
> behalf of Johnson, Roger [BSD] - HSD [rogermct at uchicago.edu]
> Sent: Wednesday, January 18, 2012 8:32 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
>> From Native_Warn.log:
> 2012-01-18 18:26:03 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Error reading request body from browser (2746).
> 2012-01-18 18:26:06 ERROR Shibboleth.Listener [2764]
> isapi_shib_extension: remoted message returned an error: Invalid HTTP 
> method (GET).
> 2012-01-18 18:26:06 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Invalid HTTP method (GET).
> 
> 
> 
> FROM native.log:
> 2012-01-18 18:26:03 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Error reading request body from browser (2746).
> 2012-01-18 18:26:06 ERROR Shibboleth.Listener [2764]
> isapi_shib_extension: remoted message returned an error: Invalid HTTP 
> method (GET).
> 2012-01-18 18:26:06 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Invalid HTTP method (GET).
> 
> Roger Johnson
> University of Chicago
> 
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net
> [mailto:users-bounces at shibboleth.net]
> On Behalf Of Johnson, Roger [BSD] - HSD
> Sent: Wednesday, January 18, 2012 8:25 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
> Hey,
> 
> There is no proxy.  In fact, the box has a LIVE IP Address.
> 
> I've tried to eliminate all possibilities.
> 
> Things I have removed as issues:
> - Domain (fresh install - not joined to domain)
> - Domain Group Policy (no domain policy applied)
> - Control Access (removed win2008 advanced security)
> - Account Shibboleth runs under (set to run as local administrator)
> - URL Rewrite module (removed)
> - Changed from Win2008 Web Edition to Win2008 Standard Edition
> - IIS Pool account running under Local Admin account
> 
> I am currently working on a box that isn't joined to the domain, has 
> no group policies, has access control turned off, and has all IIS 
> features installed.
> 
> I'm still not able to get it to work.
> 
> The weird part is, it works on my local Windows7 box but I can't get 
> it to work on Windows 2008.
> 
> I AM WILLING TO TRY ANYTHING!   I DO HAVE MY SOUL TO SELL.
> 
> 
> Roger Johnson
> University of Chicago
> 
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net
> [mailto:users-bounces at shibboleth.net]
> On Behalf Of Caskey, Paul
> Sent: Wednesday, January 18, 2012 7:41 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
> Roger-
> 
> 
> 
> Could this possibly be related to a web proxy messing with your POST 
> data?  Do you all even use a web proxy?
> 
> 
> 
> Are there any load balancers or any other security devices or software

> in between you and IIS?
> 
> 
> 
> When all other explanations fail, blame the security stuff.  :)
> 
> 
> 
> 
> 
> ________________________________
> From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on 
> behalf of Johnson, Roger [BSD] - HSD [rogermct at uchicago.edu]
> Sent: Wednesday, January 18, 2012 3:25 PM
> To: Shib Users
> Subject: RE: Install/Configuration/Run Errors
> 
> Could this be a problem with our Authentication Server?  Is that even
> possible?    I know it is working with Apache servers.
> 
> On my fresh install box, with no add-ins, no domain, no network 
> in-between, and no other sites, it doesn't work.  I'm sure it's not 
> IIS because as Scott stated, OSU has several and they all work fine.
> I have tried Win2008 Web Edition, Win2008 R2 Web Edition, and Win2008
> R2 Standard Edition.
> 
> Sorry, I know I'm just shooting in the dark to figure this out.
> 
> Roger Johnson
> University of Chicago
> 
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net
> [mailto:users-bounces at shibboleth.net]
> On Behalf Of Cantor, Scott
> Sent: Wednesday, January 18, 2012 2:53 PM
> To: users at shibboleth.net
> Subject: Re: Install/Configuration/Run Errors
> Importance: High
> 
> On 1/18/12 3:41 PM, "Johnson, Roger [BSD] - HSD" 
> <rogermct at uchicago.edu>
> wrote:
> 
>> Clean install with no secondary modules.
>> Box is NOT joined to Domain.
>> 
>> Error: isapi_shib_extension: Error reading request body from browser
>> (2746)
>> 
>> Any Ideas?
> 
> No. I can't explain how everything you're trying fails, other than to 
> say something in your environment has to be involved. Not unless 
> others are suddenly seeing this problem on every server they install, 
> and I know that's not the case here at OSU. IIS is very prevalent
here.
> 
> I don't have time to do a straight install at the moment, but perhaps 
> you can find a fresh set of eyes that has done an install and see if 
> there's some sort of documentation issue leading you down a bad path 
> somewhere...
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to

> which it is addressed and may contain information that is privileged 
> and confidential. If the reader of this email message is not the 
> intended recipient, you are hereby notified that any dissemination, 
> distribution, or copying of this communication is prohibited. If you 
> have received this email in error, please notify the sender and 
> destroy/delete all copies of the transmittal. Thank you.
> 
> 
> This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.

This email is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this email message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this email in error, please notify the sender and destroy/delete all copies of the transmittal. Thank you.