Path access control, a bit better
Young, Darren
Darren.Young at chicagobooth.edu
Wed Jul 12 18:58:19 EDT 2017
>> I just thought of something, is that plugin case sensitive?
>
>Yes.
>
While on the case idea I turned up logging in native.logger and noticed
the AccessControl bits being built were converting my settings to lower
case, AllStaff became allstaff in the native.log file:
2017-07-12 17:53:00 INFO Shibboleth.RequestMapper : building XML-based
AccessControl provider...
2017-07-12 17:53:00 DEBUG Shibboleth.RequestMapper : added Path mapping
(allstaff)
So I renamed all of the directories on disk (Windows Server 2012 R2) to be
lower case and everything appears to be working. Does this make sense? And
if the SP doesn¹t locate a path on disk does it default to a 403 access
denied to the caller?
It appears the URL itself entering IIS can be mixed case, /secure/allstaff
and /secure/AllStaff appear to be equal to the AccessControl element in
the SP.
>
More information about the users
mailing list