<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>Trying to Shibbolize a single site on an IIS7 host. Details below. The problem is:</div>
<div><br>
</div>
<div>If I go to <a href="https://default-site/secure">https://default-site/secure</a>, then I get sent to my IdP for authentication</div>
<div>If I go to <a href="https://site-to-protect/secure">https://site-to-protect/secure</a>, then I fall straight through to my default.aspx file with no bounce to IdP and no shib variables.</div>
<div><br>
</div>
<div>I’ve tried other sites beside the site I’m interested in with the same results. I’ve configured IIS7 per the instructions in the wiki. To be sure, I bootstrapped a clean VM and tried again. To my dismay, this second VM works fine! So, I’m left wondering
what odd thing in IIS is preventing the site from working.</div>
<div><br>
</div>
<div>What am I missing?</div>
<div><br>
</div>
<div>-----</div>
<div>Versions</div>
<div><br>
</div>
<div>IIS7, with many many sites. I’m protecting siteid=26, “<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>” [1]</div>
<div>Shibboleth SP 2.5.3</div>
<div>dual-stack IPv4 and IPv6. Names registered in IPv4 DNS only</div>
<div><br>
</div>
<div><br>
</div>
<div>-----</div>
<div>shibboleth2.xml (relavent bits)</div>
<div><br>
</div>
<div><InProcess logger=“native.logger”></div>
<div> <ISAPI normalizeRequest=“true” safeHeaderNames=“true”></div>
<div> <Site id=“1” name=“<a href="http://www1-clone.uark.edu">www1-clone.uark.edu</a>”/></div>
<div> <Site id=“26” name=“<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>”/></div>
<div> </ISAPI></div>
<div></InProcess></div>
<div><br>
</div>
<div><RequestMapper type=“Native”></div>
<div> <RequestMap></div>
<div> <Host name=“<a href="http://www1-clone.uark.edu">www1-clone.uark.edu</a>”></div>
<div> <Path name=“secure” authType=“shibboleth” requireSession=“true”/></div>
<div> </Host></div>
<div> <Host name=“<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>”></div>
<div> <Path name=“secure” authType=“shibboleth” requireSession=“true”/></div>
<div> </Host></div>
<div> </RequestMap></div>
<div></RequestMapper></div>
<div><br>
</div>
<div><ApplicationDefaults entityID=“<a href="https://www1-clone.uark.edu/shibboleth”">https://www1-clone.uark.edu/shibboleth”</a> REMOTE_USER=“uid eppn persistent-id targeted-id”></div>
<div> <SSO entityID=“<a href="https://idp.uark.edu/idp/shibboleth”">https://idp.uark.edu/idp/shibboleth”</a>></div>
<div> SAML2</div>
<div> </SSO></div>
<div> <MetadataProvider type=“XML” uri=“<a href="https://federation.uark.edu/metadata/uark-identity-metadata.xml”">https://federation.uark.edu/metadata/uark-identity-metadata.xml”</a></div>
<div> backingFilePath=“uark-identity-metadata.xml” reloadInterval=“7200”></div>
<div> </MetadataProvider></div>
<div></ApplicationDefaults></div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
[1] Please don’t flame me for poor DNS choices. It’s out of my control.<br>
<div apple-content-edited="true">
<div id="signature-separator" style="line-height:5px; color: #888;">-- </div>
<div id="sig" style="margin: 6px 0; padding: 8px; border-top: 1px #000 dashed; font: 12px/15px Tahoma, Geneva, sans-serif; color:#be0f34;">
<table border="1" cellpadding="0" style="border: none; position: static; z-index: auto;">
<tbody>
<tr>
<td style="font: 12/15px Monaco, Lucida Sans Typewriter, monospace;"><img src="http://goo.gl/2ZYiQ" width="43" height="43" border="0" moz-do-not-send="true" style="float:left; padding: 2px 6px 0 0;"></td>
<td style="font: 12/15px Tahoma, Geneva, sans-serif;"><span style="color: black;">Don Faulkner, CISSP</span> |
<span><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://security.uark.edu/">CISO</a> at the
<a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://www.uark.edu/">
University of Arkansas</a></span> <br>
<span style="font-family: Monaco, Lucida Sans Typewriter, monospace; color: black;">contact>>
</span><span style=""><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="mailto:donf@uark.edu">donf@uark.edu</a> | +1 (479) 575-5349</span>
<br>
<span style="font-family: Monaco, Lucida Sans Typewriter, monospace; color: black;">connect>>
</span><span style=""><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://www.facebook.com/uarkITS">uarkITS on Facebook</a> |
<a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://twitter.com/uaits">
@uaits</a> | <a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://twitter.com/dfaulkner">
@dfaulkner</a> </span></td>
</tr>
</tbody>
</table>
</div>
</div>
<br>
</body>
</html>