Shibboleth SP - Errors on IIS/Win 2003
Pete Williams
pxc433 at hotmail.com
Wed Oct 22 08:03:25 EDT 2014
Hi All
I'm trying to run the latest version of Shibboleth Service Provider on Windows 2003 with IIS.
I've been checking my settings thoroughly and have read the documentation, the relevant settings are at the end of this email.
The errors are as follows. When you navigate to:
http://mysite.com/secure.sso
then this is displayed in the browser
Shibboleth Error - Shibboleth Extension not configured for web site (check ISAPI mappings in SP configuration).
The native.log file says:
2014-10-22 11:29:45 ERROR Shibboleth.StatusHandler : invalid CIDR block (::1): Unable to parse address in CIDR block
So I've checked shibboleth2.xml carefully. The file I have edited is at c:\opt\shibboleth-sp\etc\shibboleth.
My entry for isapi mapping is:
<ISAPI safeHeaderNames="true" normalizeRequest="true"><Site port="8080" scheme="http" name="mysite.com" id="1233"/>
This iis server is behind a reverse proxy. The proxy uses SSL, but all traffic on the 'inside' of the proxy is http. The IIS server uses 8080.
The name, mysite.com, is taken from the IIS management applet - it is the column displayed under 'host header value'. The ID is from the Identifier column from the same app.
I have tried many different variations for the name. Using the description value does not work either.
Each time I make a config setting, I am careful to restart IIS and Shibboleth service.
I'd appreciate some help here. I'm coming to this after spending quite a bit of time trying to figure out what is wrong.
Cheers,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141022/fe002b85/attachment.html
More information about the users
mailing list