Overloaded shibd questions

[Cantor, Scott]

On 5/20/21, 5:06 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at signet.id> wrote:

>  We are seeing spontaneous, occasionally serial re-initialization of the ISAPI filter(chosen over the module by
> the deployers)

Maybe this is not clear, but that's not a sane "choice". That code is unsupported. It's still shipped to facilitate upgrades to the version with the module available, and in other respects for the same reason the Apache < 2.4 and NSAPI code is shipped, simply to not be obnoxious.

I will review the docs, but it became unsupported once the pre-IIS7 operating systems lapsed out of Microsoft support, as that's the normal criteria we use.

We are likely to yank all of the older modules from the redesigned SP so when we say it's deprecated, we mean it, and I guess we'll add warnings if they aren't there already.

There is nothing the old code supports that the new module doesn't. I've taken pains to track that. There are things that don't work right in either case when headers aren't used (ASP and the like), but they aren't changes to what's possible, just limits on how much improvement one can make.

-- Scott