SP Headers missing attribute

[Mike Flynn]

Well, FWIW, IT defined my site under IIS as an application.  Once I nuked that and set it as a simple sub-folder under the main site everything worked.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, April 12, 2013 10:45 AM
Subject: Re: SP Headers missing attribute
 

On 4/12/13 1:16 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>I use this link to initiate the session:

All that does is initiate a session and tell it to end at a particular
target URL, but the SP doesn't necessarily protect that final URL. That's
up to the map.

The determinant is if you don't login that way and access the resource
directly. If you aren't forced to login, then that means at least
requireSession is false. If authType is seen to be "shibboleth" for that
request, then it will at least manage the headers. If not, it won't. It's
not, so nothing is set for that resource.

In your case I would imagine the host is not configured in the Site
configuration in shibboleth2.xml so there's no mapping happening properly
for the requests.

>             <Host name="portaltest.lyndadev.com">

If that's the host you want to map, then you need to map the IIS instance
ID for the site to that hostname.

Everything you posted demonstrates that that isn't happening.

Turn native.logger to DEBUG and you'll see what it's doing or not doing.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130412/6d921a91/attachment.html