[EXT] Shibboleth 3 & Windows 2012

Nate Klingenstein ndk at sudonym.me
Fri Nov 9 20:03:46 EST 2018


Doug,

Ruling out more of the potentially obvious, are you sure there is effective
protection of the resource not seeing variables by Shibboleth in the first
place, and is the REMOTE_USER you're seeing being populated by Shibboleth?
Attributes aren't globally exported, but are rather provided only to
protected locations.

Take care,
Nate.

On Fri, Nov 9, 2018 at 2:56 PM, Doug Pham <phamx039 at umn.edu> wrote:

> I did see this part but iterating through the server variables, nothing
> showed up.  I am hoping there is something simple I missed in the
> shibboleth2.xml file.
> Server Variables
>
> Always use Server Variables
>
> Currently, the SP supports the use of server variables on all versions of
> Apache <https://wiki.shibboleth.net/confluence/display/SP3/Apache> and IIS
> <https://wiki.shibboleth.net/confluence/display/SP3/ISAPI> versions
> greater than 7. You should *always* use this mechanism with web servers
> that support it.
>
>
> On Thu, Nov 8, 2018 at 7:09 PM Steven Teixeira <steixeira at csustan.edu>
> wrote:
>
>> From https://wiki.shibboleth.net/confluence/display/SP3/IIS in the "New
>> Version in V3 of the SP" section:
>>
>>         By default, it passes values to application using Server
>> Variables rather than HTTP Headers.
>>
>> Did you upgrade from v2 on the same server or is this a new
>> installation?  If this was an upgrade have you upgraded from the old plugin
>> to take advantage of the new functionality?
>>
>> https://wiki.shibboleth.net/confluence/display/SP3/Upgrading+Older+ISAPI+
>> Configuration
>>
>> Steven Teixeira
>>
>>
>>
>> ----IF CLASSIFICATION START----
>>
>> ----IF CLASSIFICATION END----
>> --
>> For Consortium Member technical support, see https://wiki.shibboleth.net/
>> confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
> --
> Doug Pham
> Senior Programmer/Analyst
> Housing & Residential Life
> 612-625-1377
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181109/3f5730db/attachment.html>


More information about the users mailing list