/Shibboleth.sso/Login protected, but /Shibboleth.sso/SAML2/POST doesn't seem to be protected

[Luay Zakaria]

Thanks Scott.. good advice!
the site still failed the /SAML2/POST even after I made it the only
configuration. whereas other sites work without issues when configured.
I'm thinking it's a IIS filter issue. next step: uninstalling Shib SP, and
reinstalling fresh.
will update post with results.

many thanks
Luay


On Mon, Jan 21, 2013 at 7:25 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 1/21/13 7:17 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
> >On 1/21/13 6:56 PM, "Luay Zakaria" <luay.zakaria at gmail.com> wrote:
> >>
> >>With the primary (default) site  I am able to browse to
> >>/Shibboleth.sso/Login and I am redirected properly,
> >>
> >>also, when I navigate to /Shibboleth.sso/SAML2/POST I receive the
> >>expected message
> >> "opensaml::BindingException... ...Invalid HTTP method (GET)."
> >
> >You can't just access that URL, that's a SAML endpoint and it's POST only.
> >You can't get that error unless you misuse it and send it a GET.
>
> Oops, I misread your question, I see you meant that that was "expected" as
> opposed to the overridden case.
>
> The best thing to do is to not use overrides. Once that works, you can
> start worrying about overrides.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130121/081dfd13/attachment.html