Classic .asp Server Variables not available in Shibboleth v3

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Classic .asp Server Variables not available in Shibboleth v3

Laura Jaurequi
I have a customer who upgraded their servers to Windows Server 2019 running
on Azure.  They freshly installed Shibboleth v3.  In the past they have used
the server variable "Shib-AuthnContext-Class" to determine if a user
authenticated via single factor or multi-factor. Their newer applications
using .aspx DO provide the server variable.  We've viewed prior posts on
this subject and confirm that .aspx returns the Server Variables.  Both
hosts are using the same IIS version.  Has anyone been able to access Server
Variables with classic .asp applications with Shibboleth v3 and IIS?

Thanks much,

Laura Jaurequi
University of Washington



--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Classic .asp Server Variables not available in Shibboleth v3

CostantinoGrana
I've already posted on this topic and never managed to solve the problem, finally resorting to using the old ISAPI filter. If you find a solution, please post it! 

Il mer 4 dic 2019, 20:05 lauraj <[hidden email]> ha scritto:
I have a customer who upgraded their servers to Windows Server 2019 running
on Azure.  They freshly installed Shibboleth v3.  In the past they have used
the server variable "Shib-AuthnContext-Class" to determine if a user
authenticated via single factor or multi-factor. Their newer applications
using .aspx DO provide the server variable.  We've viewed prior posts on
this subject and confirm that .aspx returns the Server Variables.  Both
hosts are using the same IIS version.  Has anyone been able to access Server
Variables with classic .asp applications with Shibboleth v3 and IIS?

Thanks much,

Laura Jaurequi
University of Washington



--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Classic .asp Server Variables not available in Shibboleth v3

Cantor, Scott E.
In reply to this post by Laura Jaurequi
On 12/4/19, 2:04 PM, "users on behalf of lauraj" <[hidden email] on behalf of [hidden email]> wrote:

> Has anyone been able to access Server Variables with classic .asp applications with Shibboleth v3 and IIS?

I have no evidence they work due to IIS and ASP both being awful at their job, but I don't trust myself to be the arbiter of a technology I never use to document what is or isn't possible. If somebody with the requisite background knows it isn't then I would document the limitation.

If using headers instead doesn't work, then that would be a more serious issue since the old software did work with ASP. Headers with the module is no worse than before.

In no case is using the old filter acceptable. We will not continue to maintain that filter. But if ASP + headers + module also doesn't work, then that puts into a longer term situation regarding when we'd remove it.

I would not keep the filter around just to let ASP work without headers, even if it were possible, and I'm sure MS plans to break ISAPI someday anyway.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: Classic .asp Server Variables not available in Shibboleth v3

Laura Jaurequi
Hi Scott,

Our customer reports (and we viewed the results) that they were able to
access HTTP Headers with classic .asp applications using Shibboleth3 (native
module) with useHeaders="true".  They are running Windows Server 2019 in
Azure with IIS 10.  They have .aspx apps on the same host which are able to
access Server Variables as well.

Cheers,

Laura

University of Washington IAM Specialist



--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: Classic .asp Server Variables not available in Shibboleth v3

Cantor, Scott E.
> Our customer reports (and we viewed the results) that they were able to
> access HTTP Headers with classic .asp applications using Shibboleth3 (native
> module) with useHeaders="true".  They are running Windows Server 2019 in
> Azure with IIS 10.  They have .aspx apps on the same host which are able to
> access Server Variables as well.

That's what I've observed. It's unfortunate if for whatever reason the ASP option doesn't work with Server Variables, but since ASP really is just as "legacy" as the old ISAPI interface, it's not overly concerning to me and there really is nothing we could do about it anyway.

I think it's clear enough what's happening to document the limitation.

Note that REMOTE_USER *does* work fine now with ASP, so certainly that's where the core identity should be derived anyway, which helps some with the weaknesses of the header method.

-- Scott

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to [hidden email]