Page Comparison

Overview

Windows Internet Information (IIS) server is used to deliver web sites and applications for numerous departments. While the newest versions of IIS suppport .NET technology for which there is a well-supported CAS authentication module, older applications rely on ISAPI, the Information Server Application Programming Interface. Unfortunately, there is little or no support for an ISAPI CAS module. In order to support our IIS clients, we have created an ISAPI client module.

Download

Click here to download the CAS ISAPI Client Installer

Installation Instructions

Classlist / User File Configuration

The Distauth ISAPI client never supported the Classlist feature. However, the College of Letters and Science has provided an ODBC filter which can authorize users against a database. Please go to ODBCFilter for more information.

Passthrough / Gateway Configuration

The CAS ISAPI Module does not currently provide support for Gateway mode.

IP Restriction Configuration

IP Restriction can be configured via the IIS Administrator console:

1. Open the IIS Adminsitrator Console
2. Select your Web Site
3. Right Click and Select Properties
4. When the Properties Window Opens, select the Security Tab.
5. Click Edit in the IP address and domain restrictions section
6. Add the UC Davis IP ranges:
   • 169.237.
   • 128.120.
   • 152.79.
7. IP restrictions are now in effect.
   

Troubleshooting

If the filter is not working correctly, you may want to check these items.

• Red Arrow in IIS Administrator
  • Make sure the IIS group (whatever group the IWAM_MACHINENAME user belongs to) has read access to its location.
  • Try turning on IIS 5.0 Isolation mode. In the IIS Adminsistrator, Right Click on the 'Web Sites' folder and choose 'Properties'. In the properties window, select the 'Service' tab, and make sure the Checkbox labeled 'Run WWW service in IIS 5.0 Isolation mode' is checked. Then restart IIS.
• It's not redirecting
  • Make sure the filter is loading. Under the Internet Information Services panel, look for the filter where you applied it earlier, and make sure there is a green arrow up next to it. Make sure the IIS group (whatever group the IWAM_MACHINENAME user belongs to) has read access to its location.
• Redirection Limit Exceeded Error
  • Ensure that your links and/or users are accessing protected resources via a url with your site's domain name and not IP address. The ISAPI plugin requires that users access the protected website via its configured domain name. Additionally, domain names must be inside the ucdavis.edu domain.
• Other Problems
  • Please contact distauth@ucdavis.edu if you need additional assistance.