Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x - Incomplete installation with Uninstall errors

[Cantor, Scott]

On 9/28/12 8:02 PM, "Patibanda, Seshi K." <SESHI.K.PATIBANDA at saic.com>
wrote:

>Installed Shibboleth SP 2.5.0 for Apache 2.4.x using the distributed
>windows installer (shibboleth-sp-2.5.0-win32.msi, dated 06-SEP-2012) at
>the default installation location (C:\opt\shibboleth-sp\) on Windows
>Server 2003 Enterprise Edition SP2 Build 3790.

As I noted in the wiki, Apache 2.4 is essentially broken until 2.5.1 is
shipped. You can experiment, but that's about it.

>Before installing, made sure to update the System PATH environment
>variable by adding the value C:\Program Files\Shibboleth\SP\lib (as
>recommended by Shibboleth).

It says to do that if the installer fails. It should not be failing on
Windows 2003, and it's best not to do anything unusual unless the
installer won't complete. Otherwise we can't tell when it's working or not.

>Installation didn't report any errors. However, upon looking at the
>directory structure, it appears that the core configuration files (such
>as shibboleth2.xml, apache24.config, attribute-map.xml, etc) were
>missing at C:\opt\shibboleth-sp\etc\shibboleth.

That's not been observed before. What files were present, if any?

>All attempts to remove the Shibboleth SP 2.5.0 installation FAILED. To
>further troubleshoot the uninstall errors, ran the following windows
>installer command line option:
>msiexec /x shibboleth-sp-2.5.0-win32.msi /qn /l*v uninstall.log
>
>>From the uninstall.log snippet (given below), it appears that the
>uninstall was failing to execute a custom action
>ShibUninstallISAPIFilter.

Did you have IIS installed and/or check the IIS box during the
installation?

> Not sure why this custom action was being
>executed as this action ShibInstallISAPIFilter was skipped during
>"repair install" phase (ran using the msiexec command line options to
>repair a failed installation and captured the info in a
>repair_install.log file).

I would imagine it tried to run because it recorded that the IIS option
had been chosen to begin with. Either way it's a bug and you should file
it. But I need the detail on what options you chose and whether IIS was
installed or not.

>Error 1720. There is a problem with this Windows Installer package. A
>script required for this install to complete could not be run. Contact
>your support personnel or package vendor.  Custom action
>ShibUninstallISAPIFilter script error -2146827859, Microsoft VBScript
>runtime error: ActiveX component can't create object:
>'Scripting.FileSystemObject' Line 88, Column 1,

I don't know what Windows dependency might be involved for that, but it
seems like permissions might be involved.

>1. Did anyone ran into this install/uninstall issues with the most
>recent Shibboleth SP 2.5.0 windows MSI installer for Apache 2.4.x on
>Windows Server 2003 SP2?

The installer doesn't know anything about Apache, not ever. It has been
tested on that version of Windows. Most testing involved IIS being
installed.

>2. What kind of user security privileges with local security policies
>needed to run the Shibboleth SP 2.5.0 MSI installer?

Admin.

>3. If our server memory/storage space configuration is not sufficient to
>install the Shibboleth SP 2.5 component, do you have any minimum server
>requirements?

I doubt that's got anything to do with it unless you have some indication
it was out of memory or disk.

-- Scott