Shibboleth SP installation in Win2008R2+IIS7.5
Caio Monteiro
Hi all,
I´ve been trying to install Shibboleth SP in my Windows 2008R2 64bits with IIS 7.5 unsuccessfully for almost a full day now.
I´ve made some search already on the problem I´m having, but haven´t found a solution yet.
I´m receiving the following message when I´m checking the SP status in the browser:
“Calling LoadLibraryEx on ISAPI filter "C:\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll" failed”
I made sure the IIS6 Compatibility mode is installed and even gave permission to Everyone in the “opt” folder. But I´m still receiving the same error.
I´ve noticed that if I disable the 32bits compatibility mode, in the Default Application Pool, the error changes to:
“The page you are requesting cannot be served because of the ISAPI and CGI Restriction list settings on the Web server.”
I´ve also assured that the ISAPI filter is installed, and allowed in the server level, and at the site level as well. I´ve even reordered to be the first on the list.
The daemon is also running at all times. One more thing that I did, was to change the host-name at the shibboleth2.xml file.
I´m running out of ideas here. L
If anyone could shed some light on this I would be very appreciated!
Regards,
Caio
Cantor, Scott
>I´m receiving the following message when I´m checking the SP status in
>the browser:
>³Calling LoadLibraryEx on ISAPI filter
>"C:\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll" failed²
I would imagine you're mismatching the IIS bitness and the SP bitness one
way or the other.
>
>I´ve noticed that if I disable the 32bits compatibility mode, in the
>Default Application Pool, the error changes to:
>³The page you are requesting cannot be served because of the ISAPI and
>CGI Restriction list settings on the Web server.²
That would be an additional error and I guess that means you installed the
64-bit SP and are running 32-bit IIS (initially), and now that that's
fixed, the installer apparently didn't grant the appropriate extension
permissions either.
That has nothing to do with the file system, that's internal to IIS thanks
to it's "security" model. Imagine if you had to go to 4 different places
in Apache to tell it you wanted it to load a module. That's IIS.
-- Scott
--
To unsubscribe from this list send an email to users-un...@shibboleth.net
Fowler, Jason
I also tried changing the ISAPI filter mapping to point to specific dll's used by the application I'm integrating with Shibboleth (ARES by Atlas Systems).
I removed 2.4.3 Windows 64 and installed 2.4.2 with the same result.
My next step is to de-select the update IIS automatically during the installation (I'll go back to 2.4.3) and add the .sso mapping manually.
Cheers,
Jason Fowler
UBC Library Systems
From: Caio Monteiro <cmon...@modulo.com.br>
Date: 24 August, 2011 4:53:00 PM PDT
To: "us...@shibboleth.net" <us...@shibboleth.net>
Subject: Shibboleth SP installation in Win2008R2+IIS7.5
Reply-To: Shib Users <us...@shibboleth.net>
Hi all,
I´ve been trying to install Shibboleth SP in my Windows 2008R2 64bits with IIS 7.5 unsuccessfully for almost a full day now.
I´ve made some search already on the problem I´m having, but haven´t found a solution yet.
I´m receiving the following message when I´m checking the SP status in the browser:
“Calling LoadLibraryEx on ISAPI filter "C:\opt\shibboleth-sp\lib\shibboleth\isapi_shib.dll" failed”
I made sure the IIS6 Compatibility mode is installed and even gave permission to Everyone in the “opt” folder. But I´m still receiving the same error.
I´ve noticed that if I disable the 32bits compatibility mode, in the Default Application Pool, the error changes to:
“The page you are requesting cannot be served because of the ISAPI and CGI Restriction list settings on the Web server.”
I´ve also assured that the ISAPI filter is installed, and allowed in the server level, and at the site level as well. I´ve even reordered to be the first on the list.
The daemon is also running at all times. One more thing that I did, was to change the host-name at the shibboleth2.xml file.
I´m running out of ideas here. L
If anyone could shed some light on this I would be very appreciated!
Regards,
Caio
--
Caio Monteiro
Let me know how that goes. I´m still trying to figure out how to manage this. :(
Regards,
Caio
Cantor, Scott
>I am also experiencing the same issue and tried the same as Caio.
And I believe I explained both issues. You can't use a mismatched
Shibboleth installation and IIS process, the bitness has to match. The
other error is a simple configuration change to IIS to grant permission to
the extension and is documented in the wiki.
-- Scott