Shibboleth Developers

[Steve Carmody <>]

There are two web sites configured in IIS. I tried all combinations by
including and excluding each web site from the shibboleth.ini, but the ISAPI
filter is not kicking in in any case.

Then, I installed the shib target on my laptop which had only one web site
cconfigured under IIS. It is working fine there, and I could see some shib
variables in the HTTP header.

Thanks,
Aboo

-----Original Message-----
From: Scott Cantor 
[mailto:]
Sent: Monday, July 21, 2003 4:00 PM
To: 'Aboobacker Thanikkal'
Cc: 'Shib Design Team'; 'Oliver Pesch'
Subject: RE: Shib 1.0.1 RC for Windows


> I understand that we will have to obtain a digital certificate when we
> deploy shibboleth in production. Meanwhile, can I use the earlier test
> certificate you provided for testing?

Yep.

> I had added the isapi sections as you documented.
>
> My mustConatin setings are /scure;/protected. I just kept it
> the same you provided for testing.

Ok. Is there only the one web site configured in IIS?

> mustContain = /secure/;/protected/

> Please let me know if there is some debugging I can turn on
> to see what is happening.

Well, not really, since until we get it kicking in, it's not logging much of
anything. I would start by commenting out the mustContain setting, and try
getting that to work. That should protect everything, basically.

For some odd reason this is always a problem with IIS for me with these
filters.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

   http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--