Perl 6 - the future is here, just unevenly distributed

IRC log for #shibboleth, 2017-11-20

| Channels | #shibboleth index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
02:01 ilbot3 joined ##shibboleth
02:55 ilbot3 joined ##shibboleth
06:16 ilbot3 joined ##shibboleth
09:57 JuanDaugherty joined ##shibboleth
14:35 Es0teric joined ##shibboleth
14:58 Es0teric joined ##shibboleth
15:01 Es0teric joined ##shibboleth
15:37 Es0teric joined ##shibboleth
18:27 Es0teric joined ##shibboleth
18:33 biscuit314 joined ##shibboleth
18:41 biscuit314 Hello!  Are there humans here?
18:43 biscuit314 If you would, please see my question here:  https://serverfault.com/questions/884317/moving-ssl-cert-to-the-edge-breaks-shibboleth
18:43 biscuit314 I would love to discuss it here, if you have time.  Or feel free to answer on ServerFault.
18:44 biscuit314 Really stumped (total novice - I know just enough to be dangerous :-) )
18:49 pdurbin Do you think it matters that you're running IIS? I haven't used IIS since the 20th century.
19:23 biscuit314 Sorry, pdurbin... I was afk....
19:24 biscuit314 I don't think IIS is the culprit.  We've been running Shib just fine for most of the year.  However, maybe there is some setting in IIS.  The error message Shib is emitting is "Unable to locate satisfiable bearer SubjectConfirmation in assertion"  I've heard this means Shib believes the server name is different than what the IdP is asserting.
19:25 biscuit314 That makes sense, and if true I just need to find the mismatch somewhere.  The name in the nginx.conf matches the domain in the SSL certs, matches IIS bindings, and matches the server name in shibboleth2.xml
19:35 pdurbin You might want to ask at http://shibboleth.net/mailman/listinfo/users
19:36 biscuit314 Good idea.  I've just sent the subscribe request.  Thanks!
19:41 pdurbin Sure. They've been very helpful over the years. And once we shipped support for Shib it's been a popular feature in our app.
19:51 Es0teric joined ##shibboleth
20:31 irccafe joined ##shibboleth

| Channels | #shibboleth index | Today | | Search | Google Search | Plain-Text | summary