Shibboleth SP3 and IIS10

CostantinoGrana costantino.grana at unimore.it
Wed Aug 28 10:04:27 EDT 2019


Cantor, Scott E. wrote
>> So, unless I've missed something it appears to be some kind of bug. 
> There isn't.
> 
> The ISAPI filter is never going to provide the variables because it can't,
> only headers. Only the new module supports true server variables (and it
> does not export headers by default). So you're mixing testing scenarios.

As I've stated, "nothing appears, even when providing directly the string to
Request.ServerVariables, i.e.
Request.ServerVariables("EPPN")".


Cantor, Scott E. wrote
> Looping also does not work, at least not for server variables, Microsoft
> isn't tracking the information at the right time and doesn't see the ones
> set later, only direct access to them works in my experience.
> 
> I'm not on a Windows machine at the moment so I don't have the scripts
> I've tested with handy but it works. If you want compatibility (and less
> security) with pre-existing code using headers then you simply have to
> turn that option on.

The problem is that the ServerVariables are not being set. When enabling the
ISAPI filter then the headers get set correctly, but of course those are not
server variables. 

I've tried both upper and lower case (lower case is used in
attribute-map.xml).

	Response.Write "CN = " & Request.ServerVariables("CN") & "<br>" & vbCrLF
	Response.Write "EPPN = " & Request.ServerVariables("EPPN") & "<br>" &
vbCrLF
	Response.Write "cn = " & Request.ServerVariables("cn") & "<br>" & vbCrLF
	Response.Write "eppn = " & Request.ServerVariables("eppn") & "<br>" &
vbCrLF

None of these work.




--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list