Sitecore HttpModule on IIS vs. Shib

[pveller]

Well, Sitecore.Nexus.HttpModule is the main entry point for all HTTP request.
The code for that one is obfuscated (that assembly also handles licensing)
but I read enough through the control flow obfuscation to spot Request.Form
in there. 

We started by turning off all processes that  the module calls into but
Shibboleth would still report error 500. Only then did I start looking
inside the HttpModule itself. If I confirm that it reads the stream BEFORE
it passes the control off to the "application" logic there's not much we can
do without replacing the module. 

I will provide their support with all the details. Maybe they can send us a
patch. I will keep everyone on this list posted of course. 




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Sitecore-HttpModule-on-IIS-vs-Shib-tp7616178p7616654.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.