trouble with iis 7.5 windows sever 2008 r2

[Cantor, Scott]

On 6/1/13 7:39 PM, "Roger Reynolds" <rreynolds at axiomepm.com> wrote:
>
>- You were be correct about my dev machine environment and testshib.  I
>went ahead and uploaded the metadata to and, to my surprise, it worked.
>That is, it redirected my attempt to access my "secure" pages to the test
>IdP, and then back to my test page after auth.  So, that's good.     The
>thing is, the only header I see after authenticating is the cookie
>_shibsession_<longrandomlookingstring>.  I was expecting to see some
>other items that would help me discover the username that was used to
>authenticate with.

If you got redirected to login, then there are any number of built-in
headers that will always be set. I suspect you're using an improper API or
something. The only information I can provide is what's in the
NativeSPAttributeAccess page in the wiki and there are ASP.NET examples at
the bottom. I have no particular .NET experience.

Attribute-wise, that depends on testshib, whether things actually worked,
what attributes it provides, and what attributes you mapped for extraction
to headers.

>- As far as that other server goes...  I edited the shibboleth2.xml
>config file again, restarted the services again, and then I was getting a
>different error. Discovered that the URLs at and below Shibboleth.sso are
>case sensitive.

Certainly anything "virtual" handled by the SP is. RequestMap evaluation
of path information is done by case folding to avoid inadvertent exposures.

> Grrr.  I get a variety of errors unless I use exactly
>Shibboleth.sso/Metadata. If I do that, it works and I can get my metadata
>and I can upload it to testshib and authenticate and all is well.  I
>don't know about the rest of the world, but my expectation is that URIs
>are not case sensitive.

URIs are in fact as a technical matter case sensitive.

>- Anyway, now I'm pretty much to the same place with both servers, which
>can be stated as - now that we're authenticated, how do we do
>authorization?  I'm sure that's described out there somewhere...

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPProtectContent
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAcces
s

-- Scott