<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>Trying to Shibbolize a single site on an IIS7 host. Details below. The problem is:</div>
<div><br>
</div>
<div>If I go to <a href="https://default-site/secure">https://default-site/secure</a>, then I get sent to my IdP for authentication</div>
<div>If I go to <a href="https://site-to-protect/secure">https://site-to-protect/secure</a>, then I fall straight through to my default.aspx file with no bounce to IdP and no shib variables.</div>
<div><br>
</div>
<div>I’ve tried other sites beside the site I’m interested in with the same results. I’ve configured IIS7 per the instructions in the wiki. To be sure, I bootstrapped a clean VM and tried again. To my dismay, this second VM works fine! So, I’m left wondering
 what odd thing in IIS is preventing the site from working.</div>
<div><br>
</div>
<div>What am I missing?</div>
<div><br>
</div>
<div>-----</div>
<div>Versions</div>
<div><br>
</div>
<div>IIS7, with many many sites. I’m protecting siteid=26, “<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>” [1]</div>
<div>Shibboleth SP 2.5.3</div>
<div>dual-stack IPv4 and IPv6. Names registered in IPv4 DNS only</div>
<div><br>
</div>
<div><br>
</div>
<div>-----</div>
<div>shibboleth2.xml (relavent bits)</div>
<div><br>
</div>
<div>&lt;InProcess logger=“native.logger”&gt;</div>
<div>&nbsp; &lt;ISAPI normalizeRequest=“true” safeHeaderNames=“true”&gt;</div>
<div>&nbsp; &nbsp; &lt;Site id=“1” name=“<a href="http://www1-clone.uark.edu">www1-clone.uark.edu</a>”/&gt;</div>
<div>&nbsp; &nbsp; &lt;Site id=“26” name=“<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>”/&gt;</div>
<div>&nbsp; &lt;/ISAPI&gt;</div>
<div>&lt;/InProcess&gt;</div>
<div><br>
</div>
<div>&lt;RequestMapper type=“Native”&gt;</div>
<div>&nbsp; &lt;RequestMap&gt;</div>
<div>&nbsp; &lt;Host name=“<a href="http://www1-clone.uark.edu">www1-clone.uark.edu</a>”&gt;</div>
<div>&nbsp; &nbsp; &lt;Path name=“secure” authType=“shibboleth” requireSession=“true”/&gt;</div>
<div>&nbsp; &lt;/Host&gt;</div>
<div>&nbsp; &lt;Host name=“<a href="http://myparkingaccount-clone.uark.edu">myparkingaccount-clone.uark.edu</a>”&gt;</div>
<div>&nbsp; &nbsp; &lt;Path name=“secure” authType=“shibboleth” requireSession=“true”/&gt;</div>
<div>&nbsp;&nbsp;&lt;/Host&gt;</div>
<div>&nbsp; &lt;/RequestMap&gt;</div>
<div>&lt;/RequestMapper&gt;</div>
<div><br>
</div>
<div>&lt;ApplicationDefaults entityID=“<a href="https://www1-clone.uark.edu/shibboleth”">https://www1-clone.uark.edu/shibboleth”</a> REMOTE_USER=“uid eppn persistent-id targeted-id”&gt;</div>
<div>&nbsp; &lt;SSO entityID=“<a href="https://idp.uark.edu/idp/shibboleth”">https://idp.uark.edu/idp/shibboleth”</a>&gt;</div>
<div>&nbsp; &nbsp; SAML2</div>
<div>&nbsp; &lt;/SSO&gt;</div>
<div>&nbsp; &lt;MetadataProvider type=“XML” uri=“<a href="https://federation.uark.edu/metadata/uark-identity-metadata.xml”">https://federation.uark.edu/metadata/uark-identity-metadata.xml”</a></div>
<div>&nbsp; &nbsp; backingFilePath=“uark-identity-metadata.xml” reloadInterval=“7200”&gt;</div>
<div>&nbsp; &lt;/MetadataProvider&gt;</div>
<div>&lt;/ApplicationDefaults&gt;</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
[1] Please don’t flame me for poor DNS choices. It’s out of my control.<br>
<div apple-content-edited="true">
<div id="signature-separator" style="line-height:5px; color: #888;">--&nbsp;</div>
<div id="sig" style="margin: 6px 0; padding: 8px; border-top: 1px #000 dashed; font: 12px/15px Tahoma, Geneva, sans-serif; color:#be0f34;">
<table border="1" cellpadding="0" style="border: none; position: static; z-index: auto;">
<tbody>
<tr>
<td style="font: 12/15px Monaco, Lucida Sans Typewriter, monospace;"><img src="http://goo.gl/2ZYiQ" width="43" height="43" border="0" moz-do-not-send="true" style="float:left; padding: 2px 6px 0 0;"></td>
<td style="font: 12/15px Tahoma, Geneva, sans-serif;"><span style="color: black;">Don Faulkner, CISSP</span> |
<span><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://security.uark.edu/">CISO</a> at the
<a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://www.uark.edu/">
University of Arkansas</a></span> <br>
<span style="font-family: Monaco, Lucida Sans Typewriter, monospace; color: black;">contact&gt;&gt;
</span><span style=""><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="mailto:donf@uark.edu">donf@uark.edu</a> | &#43;1 (479) 575-5349</span>
<br>
<span style="font-family: Monaco, Lucida Sans Typewriter, monospace; color: black;">connect&gt;&gt;
</span><span style=""><a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://www.facebook.com/uarkITS">uarkITS on Facebook</a> |
<a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://twitter.com/uaits">
@uaits</a> | <a onmouseover?this.style.textdecoration?underline??onmouseout?none??="" style="color:#be0f34; text-decoration:none;" href="http://twitter.com/dfaulkner">
@dfaulkner</a> </span></td>
</tr>
</tbody>
</table>
</div>
</div>
<br>
</body>
</html>