Shibboleth SP Leading to 404

[Jeff Gehly]

I've set up shibboleth SP a total of three times now, but this is the first
time I've run into this issue and I can't figure it out.  I'm running a
WebLogic IdP and the shibboleth SP on an IIS machine.

When I have disabled shibboleth's site protection, I can hit the site just
fine.  When I turn it on, I end up with a 404 (the IdP logs just show a SAML
redirect with a 404 status code).  This is what my shibboleth2.xml ISAPI
configuration looks like:

<Site id="1" name="10.5.6.200" />
<Site id="2" name="10.5.6.200" port="90" />


My request map looks like this:

<Host name="10.5.6.200">
       <Path name="folderA" authType="shibboleth" requireSession="true" />
</Host>
<Host name="10.5.6.200" port="90">
       <Path name="folderB" authType="shibboleth" requireSession="true"/> 
</Host>




I've seen another thread in the mailing list with a problem like this that
said to check whether the filters are present on IIS.  I checked and the
ISAPI filter is in place and the handler mappings have an entry for *.sso.

I'm not seeing any errors in any logs (shibd.log, shibd_warn.log, and
stdout.log).  I've run shibd.exe -check and it informs me the overall
configuration is loadable.  

The /Status handler returns without a problem, and the Metadata generates. 
I've checked that the WebLogic IdP has the Shibboleth SP set as a service
provider partner and is using it's metadata file.  I've also checked that
the IdP's metadata file is being loaded by Shibboleth.  I've even reloaded
the metadata files just to make sure everything is being set.  The fact that
I'm seeing a 404 tells me that I've missed something.

What am I doing wrong or not considering?



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-SP-Leading-to-404-tp7585393.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.