Path access control, a bit better

Young, Darren Darren.Young at chicagobooth.edu
Wed Jul 12 18:58:19 EDT 2017


>> I just thought of something, is that plugin case sensitive?
>
>Yes.
>

While on the case idea I turned up logging in native.logger and noticed
the AccessControl bits being built were converting my settings to lower
case, AllStaff became allstaff in the native.log file:

2017-07-12 17:53:00 INFO Shibboleth.RequestMapper : building XML-based
AccessControl provider...
2017-07-12 17:53:00 DEBUG Shibboleth.RequestMapper : added Path mapping
(allstaff)


So I renamed all of the directories on disk (Windows Server 2012 R2) to be
lower case and everything appears to be working. Does this make sense? And
if the SP doesn¹t locate a path on disk does it default to a 403 access
denied to the caller?

It appears the URL itself entering IIS can be mixed case, /secure/allstaff
and /secure/AllStaff appear to be equal to the AccessControl element in
the SP.
>



More information about the users mailing list