trouble with iis 7.5 windows sever 2008 r2

[Cantor, Scott]

On 6/1/13 3:16 PM, "Roger Reynolds" <rreynolds at axiomepm.com> wrote:
>Problem is, that machine is not publicly visible, so I think it doesn¹t
>do me much good as far as trying to register that metadata with the test
>IP.

I don't think testshib cares unless you're using flows involving SOAP.

>I am sure that the isapi filter is up and running and processing requests.
>I cranked up the native.logging to debug, and I see this for an incoming
>request:
>2013-06-01 11:11:58 DEBUG Shibboleth.ISAPI [3968] isapi_shib: mapped
>http:// shibtest.mycompany.com /Shibboleth.sso/Metadata to default

Those spaces in your log enities there seem suspicious to me. I would
check for whitespace in your XML file that might be throwing something
off. I would have to check the code to see whether it's handling that or
not.

I can't really identify an obvious issue, something is off in your Site
mappings.

That error usually involves SSL offloading or load balancing. If you have
some kind of bizarre network situation, the way a lot of firewall-obsessed
places do, that might be a source of complexity.

>Also, note that if I stop the shibd service, it makes no difference.  By
>that I conclude that the ISAPI filter is not recognizing the request as
>being something that it wants to handle.

Extension, actually, not the filter, but yes.

>Also, an unrelated question -   is Shibboleth supported, or can it be
>manually configured, for Windows Server 2012 and IIS 8?  It doesn¹t
>appear to be listed as such, and there are no ISAPI Filters in IIS8, so
>my assumption is that it is not possible.  Is that correct?

I just did the first actual test of the software on it, that's why it's
not listed. IIS 8 certainly supports filters (seeing as I just tested it).

(That aside, the UI for Server 2012 is the most hysterically awful joke I
think I've ever seen.)

-- Scott