IIS and new Service Provider v2.5

[Martin B. Smith]

On 11/06/2012 11:18 AM, Martin B. Smith wrote:
> Has anyone else seen this, and if so, did you identify a root cause? I'm
> surprised as "st:" is not a header I've ever heard of, and it doesn't
> match any attribute that we vend to service providers.

As a follow up, someone over here has pointed out that service providers 
may have defined in an attribute map:

  <Attribute name="urn:mace:dir:attribute-def:st" id="st"/>

So perhaps there's some common application or IIS header also called st? 
Even if we're not releasing anything called st, this potentially breaks 
most AD-joined IIS servers with Shibboleth, *if* this is coming from a 
standard AD attribute, and *if* the state attribute is already defined 
in the SP attribute map.

Thanks all,
-- 
Martin B. Smith, Systems Administrator
smithmb at ufl.edu - (352) 273-1329
UF Information Technology, CNS/Open Systems Group
University of Florida

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3740 bytes
Desc: S/MIME Cryptographic Signature
Url : http://shibboleth.net/pipermail/users/attachments/20121106/328937fd/attachment-0001.bin