SP configuration on IIS (ISAPI) and preservation of POST data

Bobby Lawrence robertl at jlab.org
Fri May 9 10:49:27 EDT 2014


So we've been using Shibboleth for a while now and are very pleased.
We are running the SP (version 2.4.2) on IIS.
However we've noticed that when someone submits a form POST after their 
session has timed out, when they are redirected back, the POST 
parameters are missing and the page usually ends up in an error because 
it was expecting a POST and instead its receiving a GET.
According to the docs 
(https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions), 
there are a few options that allow the SP to preserve the POST 
parameters in a StorageService for replaying after authentication 
(postData, postLimit, postTemplate, postExpire).
However, whenever I test this, I always get an error.  The native.log 
file has this message:

ERROR Shibboleth.ISAPI [3084] isapi_shib: The request's Content-Length is not available to an ISAPI filter.

Is this a feature that isn't supported on the ISAPI version of the SP or 
something ?

-- 
Bobby Lawrence
MIS Software Developer
Jefferson Lab (http://www.jlab.org)
757-269-5818




More information about the users mailing list