<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Well, FWIW, IT defined my site under IIS as an application. Once I nuked that and set it as a simple sub-folder under the main site everything worked.</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, April 12, 2013 10:45 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: SP Headers missing attribute<br> </font> </div> <div class="y_msg_container"><br>
On 4/12/13 1:16 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>I use this link to initiate the session:<br><br>All that does is initiate a session and tell it to end at a particular<br>target URL, but the SP doesn't necessarily protect that final URL. That's<br>up to the map.<br><br>The determinant is if you don't login that way and access the resource<br>directly. If you aren't forced to login, then that means at least<br>requireSession is false. If authType is seen to be "shibboleth" for that<br>request, then it will at least manage the headers. If not, it won't. It's<br>not, so nothing is set for that resource.<br><br>In your case I would imagine the host is not configured in the Site<br>configuration in shibboleth2.xml so there's no mapping happening properly<br>for the requests.<br><br>>
<Host name="<a target="_blank" href="http://portaltest.lyndadev.com/">portaltest.lyndadev.com</a>"><br><br>If that's the host you want to map, then you need to map the IIS instance<br>ID for the site to that hostname.<br><br>Everything you posted demonstrates that that isn't happening.<br><br>Turn native.logger to DEBUG and you'll see what it's doing or not doing.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>