[Shib-Users] ISAPI extension can only be invoked to process Shibboleth protocol requests

[sail...@yahoo.co.in]

Hi

I install shibboleth sp and http://localhost/shibboleth.sso/Status returns xml file.

after this when i am tryiing to configure this with Testshib and replace shibboleth.sml file from testshib and metada.

Now i changed handlessl = true in shibboleth.xml i am getting error of

"Shibboleth Error
ISAPI extension can only be invoked to process Shibboleth protocol requests.Make sure the mapped file extension doesn't match actual content."
with the link "https://localhost/shibboleth.sso/Status"

And error of "Connection was interrupted" with SSL secured link of "https://localhost/shibboleth.sso/Status"

I am using "Firefox Browser"

Thanks in Advance

Thanks & Regards
Sailu

[Nate Klingenstein]

Sailu,

This is a simplistic guess, but it might be that you forgot to capitalize the S in Shibboleth.sso.  URL's are treated as case sensitive by Shibboleth, but not by IIS, so it would route the request and Shibboleth would probably fail to match it.  Try http://localhost/Shibboleth.sso/Status.

The "Connection was Interrupted" error probably means your SSL configuration in IIS is broken, not anything to do with Shibboleth itself.

Take care,

Nate.

[Scott Cantor]

> This is a simplistic guess, but it might be that you forgot to capitalize
> the S in Shibboleth.sso. URL's are treated as case sensitive by
Shibboleth,
> but not by IIS, so it would route the request and Shibboleth would
probably
> fail to match it. Try http://localhost/Shibboleth.sso/Status.

That is the reason, yes. URLs are always case sensitive, but a script
mapping in IIS, at least most versions, is based on the file extension.

-- Scott