Shibboleth Developers

[Scott Cantor <>]

> I just installed the sbhib-target 1.0.1 for IIS and 
> configured the ISAPI filter and started the shar in the 
> console mode. As I noticed that you have not included the 
> sample certificate files mentioned in the shibboleth.ini 
> file, I copied those files from my old alpha installation. Is it OK?

We can't include keys for your server, needless to say. That's site
specific.

> When I tried to access a protected page (/secure/xxx), the 
> page is shown without any authentication.

What are your mustContain settings? It should protect everything if you
don't set anything for that. You do need to at least create the [isapi]
section and map the INSTANCE ID (1) to the site's hostname, at the very
least. Without that, it will flat out skip the site. I need to document that
more precisely.

> Do I have to do anything else? Do I need to create any 
> /shibboleth virtual directory as we used to do in the alpha version. 

No.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--