trouble with iis 7.5 windows sever 2008 r2

[Roger Reynolds]

Then I am very disturbed, because this is the only configuration in which I can get shibboleth to even appear to work.

Can you be a little more specific about what you might expect to go wrong in the case of a 64bit shibd service that gets requests from a 32bit isapi filter, so I might know what kind of trouble to look for?  I'm guessing that there is binary compatibility required with the messages being exchanged?


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, June 03, 2013 10:36 AM
To: Shib Users
Subject: RE: trouble with iis 7.5 windows sever 2008 r2

> Then I went in and manually added both the 32 and 64 bit versions of 
> the filter and handler mappings, and noted that when I did this the 
> preCondition attrs that I mentioned were created.
> And with that, it works perfectly.

I have a lot of reasons to think that shibd will only handle a remoted client module of the same bitness it's built with. It may seem to work, but I'm very skeptical that it would work under real world conditions, and I definitely don't support it. I am flabbergasted it appears to work at all. I would have bet 3 figures it wouldn't.

> So I guess my suggestions would be, at least for IIS, for the 
> installer to remove that 32bit checkbox and install both architecture 
> ISAPI filters with the preCondition attrs set.

The reason is per the above.

If I had the time to actually work out 100% for certain that I'm wrong about this and test it, then it's possible I'd consider it. But that time won't exist for many months if ever.

(As an aside unsinstalling is not required. Switching between them now is done by editing the IIS config directly and running a SetServiceXX script out of /etc/shibboleth. This is because usually IIS doesn't work for most people after installation so uninstalling and losing those settings is very painful.)

-- Scott



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net