[JIRA] Created: (SSPCPP-448) setting relayState to use ODBC storage service results in attempted redirects to an invalid URL

[Sebastien Otto Korner (JIRA)]

setting relayState to use ODBC storage service results in attempted redirects to an invalid URL
-----------------------------------------------------------------------------------------------

                 Key: SSPCPP-448
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-448
             Project: Shibboleth SP - C++
          Issue Type: Bug
      Security Level: Standard (Standard bug, may impact functionality but does not represent a security vulnerability )
          Components: SAML 2.0 Single Sign-On
    Affects Versions: 2.4.3
         Environment: RHEL5 and 6, Apache 2.2, SP 2.4.3 from RPM, and MySQL for storage service. 
            Reporter: Sebastien Otto Korner
            Assignee: Scott Cantor
            Priority: Minor


When using the ODBC storage service and setting the Session attribute relayState to use this storage service (ss:db), the redirect generated at the end of SSO is to a URL value that appears to include the internal identification info instead of just the URL.  In the logs one sees:

ACS returning via redirect to: ss:db:dd9523710a79a9e408efa5fde5c4e447https://test.babel.hathitrust.org/shcgi/mb

This leads to an XMLTooling error in the browser and similar message in the native log:

ERROR Shibboleth.Apache [16332] shib_handler: URL contains invalid scheme (ss).

Thanks.

Sebastien


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira