Proxy and ISAPI extension not configured error

[Istvan Gonzales]

I looked closer into my problem with SP not accepting an authn assertion
through the proxy. I decrypted the "good" assertion and the "bad" assertion
and I see no differences of substance in their content. Each has an
AttributeStatement and an AuthnStatement, and only a session ID differs
between the two AuthnStatements.

I also learned a tad bit more about the environment. This is an F5 proxy.
No DNS is setup yet. But this shouldn't matter as long as there is a host
entry on the test machine and if the default configuration uses front
channel binding. Does the SP contact the IdP directly?
-Istvan
On Fri, Aug 24, 2012 at 11:05 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On Aug 24, 2012, at 12:04 AM, "Istvan Gonzales" <istvangonzales at gmail.com>
> wrote:
>
> >
> > Is there some obvious misconfiguration that can be responsible for their
> issue, specifically that users can log in properly if accessing the website
> directly, but they get the below error when logging into a protected area
> when using a host entry to the proxy? Non-protected areas of the website
> work fine.
> >
> > "ISAPI extension can only be invoked to process Shibboleth protocol
> requests.Make sure the mapped file extension doesn't match actual content."
>
> The requests for the handler are being processed such that The effective
> URL seen by the SP doesn't match the handlerURL setting.
>
>
> -- Scott
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120912/3383bec3/attachment.html