Thanks Jarod, 
  That works! Now for my next trick....

Mike
 

-----Original Message-----
From: Jarod Malestein [mailto:[email protected]] 
Sent: Tuesday, March 17, 2009 4:08 PM
To: Magee, Mike # Atlanta
Cc: [email protected]
Subject: Re: [Cosign-discuss] Starttls error on Cosign IIS Filter


The CN of your SSL certificate needs to be authorized by the central
weblogin server.  A line in cosign.conf such as:

service atldev-sso2     0

...should be sufficient.

Cosign.conf also recognizes wild card values such as:

service *.umich.edu     0


Jarod


On Mar 17, 2009, at 10:06 AM, Magee, Mike # Atlanta wrote:

> Hi,
>  Not sure is this is the right place to ask for Cosign help,  but I am

> getting this error when trying to access a protected website.
>  This is an extract from DebugView (suggested by the documentation).
>
>
>
> [3592] Setting COSIGN_SERVICE server variable.
> [3592] Done setting COSIGN_SERVICE server variable.
> [3592] FindCookie()
> [3592] Service Name = cosign-IISCosignRH [3592] Raw cookie = 
> ASP.NET_SessionId=ogbaqm45t2aphnuqh4p3rl55;
> settlement
> =245205D455970CA0D53A80AF185E81710896B07A3B60439C57465B57147CB
> 28EA5F8BA56F2D71C108C5B57B46CE480C7757F65029E79E339DAA7EBDEB1224B0A086
> 8A C3991B598C4B799E3FAACE52C42F4062724B7061394B210BFE61FD230E5;
> cosign-IISCosignRH=NLCwDTExLtqRlgWD9Off75PhzHwY2CIOXn7cG3qz
> +CLBNnfMf3Az5
> YfHquFYAIoSHQMq-uAiWseNqNDwBGPApc
> +zZBBHVpTrMGUhgEbt4QGOBNZNLcTvuAuWVNcW
> [3592] Got cookie for: cosign-IISCosignRH [3592] 
> data=NLCwDTExLtqRlgWD9Off75PhzHwY2CIOXn7cG3qz
> +CLBNnfMf3Az5YfHquFYAIoSHQM
> q-uAiWseNqNDwBGPApc+zZBBHVpTrMGUhgEbt4QGOBNZNLcTvuAuWVNcW
> [3592] Grabbing connection 0.
> [3592] ReadSCookie( C:\Program
> Files\IISCosign\CookieDB\NLCwDTExLtqRlgWD9Off75PhzHwY2CIOXn7cG3qz
> +CLBNnf
> Mf3Az5YfHquFYAIoSHQMq-uAiWseNqNDwBGPApc
> +zZBBHVpTrMGUhgEbt4QGOBNZNLcTvuAu
> WVNcW )...
> [3592] Reading service cookie for C:\Program 
> Files\IISCosign\CookieDB\NLCwDTExLtqRlgWD9Off75PhzHwY2CIOXn7cG3qz
> +CLBNnf
> Mf3Az5YfHquFYAIoSHQMq-uAiWseNqNDwBGPApc
> +zZBBHVpTrMGUhgEbt4QGOBNZNLcTvuAu
> WVNcW
> [3592] ReadSecant::CreateFile( C:\Program 
> Files\IISCosign\CookieDB\NLCwDTExLtqRlgWD9Off75PhzHwY2CIOXn7cG3qz
> +CLBNnf
> Mf3Az5YfHquFYAIoSHQMq-uAiWseNqNDwBGPApc
> +zZBBHVpTrMGUhgEbt4QGOBNZNLcTvuAu
> WVNcW ) failed.
> [3592] The system cannot find the file specified.
> [3592] ReadSCookie returned 1
> [3592] Time diff is 2850370544
> [3592] DBExpiretime is 29992711
> [3592] seconds = 4291836979
> [3592] time diff evaluates to 0
> [3592] CookieValid falling through
> [3592] Attaching...
> [3592] connect_sn:: starttls 2: 401 No access for atldev-sso2 [3592] 
> Attach failed!
> [3592] CookieValid::CheckCookie() failed [3592] 
> OnPreprocHeaders()::CookieValid() error.
>
>
> It looks like startTLS is the problem. I guess I missed something in 
> the install process. Any help would be greatly appreciated.
>
> Thanks in advance,
> Mike
>
> ----------------------------------------------------------------------
> -------- Apps built with the Adobe(R) Flex(R) framework and Flex 
> Builder(TM) are powering Web 2.0 with engaging, cross-platform 
> capabilities. Quickly and easily build your RIAs with Flex Builder, 
> the Eclipse(TM)based development software that enables intelligent 
> coding and step-through debugging.
> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com 
> _______________________________________________
> Cosign-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
>
>


------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to