targeted-id question

[Mike Flynn]

Mine must be older as my ISAPI stanza looks like this:

<ISAPI normalizeRequest="true">
<!-- Maps IIS Instance ID values to the host name. -->
<Site id="4" name="shib.lynda.com"/>
</ISAPI>


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Monday, February 18, 2013 11:37 AM
Subject: RE: targeted-id question
 
> I do not think I have safeHeaderNames turned on as persistent-id passes as
> http_persistent-id like this:

Those are internal names directly from the attribute map, not the header names used on export.

I don't know what API you use or anything about its requirements. The information I have is in the https://wiki.shibboleth.net/confluence/display/SHIB2/secadv_20090615 wiki topic on what's safe and what isn't. But safeHeaderNames is in all the configs by default, unless it's an older one that predates the option.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130218/d2bf3a05/attachment-0001.html