Trouble with SP Attributes

[George Glessner]

I get redirected to the IDP when I go to http://george-oxygen.seitrakker.com:8080/intranet but say I enter in http://george-oxygen.seitrakker.com:8080/intranet/images/test.jpg I do not get prompted by the IDP to enter my credentials. Both my host name and site name are identical in <ISAPI> and <RequestMap>. 

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: Thursday, June 28, 2018 3:06 PM
To: users at shibboleth.net
Subject: Re: Trouble with SP Attributes

* George Glessner <gglessner at serviceexpress.com> [2018-06-28 20:44]:
>     <RequestMapper type="Native">
>         <RequestMap>
>             <!--
>             The example requires a session for documents in /secure on the containing host with http and
>             https on the default ports. Note that the name and port in the <Host> elements MUST match
>             Apache's ServerName and Port directives or the IIS Site name in the <ISAPI> element above.
>             -->
>             <Host name="george-oxygen.seitrakker.com" scheme="http" port="8080">
>                 <Path name="intranet" authType="shibboleth" requireSession="true"/>
>             </Host>
>             <!-- Example of a second vhost mapped to a different applicationId. -->
>             <!--
>             <Host name="admin.example.org" applicationId="admin" authType="shibboleth" requireSession="true"/>
>             -->
>         </RequestMap>
>     </RequestMapper>
> 
> The way I understand, is that anything under the intranet folder 
> should require a session? So if I were to call
> Request("HTTP_SHIB_IDENTITY_PROVIDER") in a file in the intranet 
> folder, I should be able to get that value?

If that's the right API call to use (I don't know ASP), then yes.
Provided the rest of the config even works, e.g. are getting redirected to the IDP if you're accessing http://george-oxygen.seitrakker.com:8080/intranet with a "fresh"
browser? If not see "SP does not protect" in the Common Problems section of the wiki.
Also pay attention to the comment above about IIS Site names.

-peter
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net