IIS7 with SP-Plugin, authentication infinite loop

[Stefan König]

Am 13.07.2012 19:24, schrieb Cantor, Scott:
> Your bug is that you've violated the cardinal rule: The handlerURL MUST
> map to the same applicationId as the resources its associated with.
>
>>              <Host name="idefix.worldtalk.de" scheme="https" port="82">
>>                  <Path name="RoleManager" applicationId="RoleManager"
>> authType="shibboleth" requireSession="true" exportAssertion="true"/>
>>              </Host>
>>
> You overrode /RoleManager as a path, but your handlers remain rooted at
> /Shibboleth.sso. That means the session is created for the default
> applicationId, and then your request is mapped to an override.
>
> There's no obvious reason why you're creating an override at all, but if
> you need one, refer to the NativeSPApplicationModel and related topics on
> how to do that.

Currently looks like this (as I reconfigured it for port 443):
             <Host name="idefix.worldtalk.de" scheme="https">
                 <Path name="RoleManager" applicationId="RoleManager" 
authType="shibboleth" requireSession="true" exportAssertion="true"/>
             </Host>

Without this entry the SP plugin just gave anyone access to the resource.
I'll have a look at this wiki page, seem's reasonable to be a 
misconfiguration.
Will let you know the results then...

Thanks & Regards,

Stefan

-- 
----------==========#########>>>>>ZDV<<<<<#########==========----------

Dipl.-Inform. Stefan König
Zentrum für Datenverarbeitung
Universität Tübingen
Wächterstraße 76
D-72074 Tübingen

E-Mail: s.koenig at uni-tuebingen.de
Fon: +49 7071 29-70286
Fax: +49 7071 29-5912

----------==========##########>>>>>@<<<<<##########==========----------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4480 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20120717/98b4680e/attachment.bin