Shibboleth SP 3 IIS and handlerURL

[John Schrader]

I guess I will confirm the bug:
With this config:

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                  checkAddress="false" handlerSSL="true" cookieProps="https"
                  handlerURL="/sp/Shibboleth.sso">

curl http://localhost/sp/Shibboleth.sso/Session

does NOT produce a 404.

Thanks!

On Fri, Mar 22, 2019 at 11:58 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/22/19, 9:17 AM, "users on behalf of Peter Schober" <
> users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at>
> wrote:
>
> > I would have expected a 404 Not Found error here too, since you set
> > handlerSSL=true above but access the handler over plain http.
> > So works as configured, I'd say.
>
> That's a bug, I bet, more problems with that "optimization" that I think
> we'll probably just dump since it's just causing bugs.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
John Schrader
Identity and Access Management
Office of Information Technologies
University of Notre Dame

EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER
—ALBERT EINSTEIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190322/13f61854/attachment.html>