[JIRA] Commented: (SSPCPP-445) RequestInitiator metadata generated in a case where it shouldn't be

Scott Cantor (JIRA) noreply at shibboleth.net
Tue Jun 5 18:55:03 BST 2012


    [ https://issues.shibboleth.net/jira/browse/SSPCPP-445?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14120#comment-14120 ] 

Scott Cantor commented on SSPCPP-445:
-------------------------------------

Well, blocking the various handlers from being installed stand alone is a bit of a mess basically, they don't know enough at creation time to tell. So that's probably why I didn't do it.

So I'll just apply the metadata fix to all of them since they won't successfully run at all, and that kind of implies the endpoint won't really work.

> RequestInitiator metadata generated in a case where it shouldn't be
> -------------------------------------------------------------------
>
>                 Key: SSPCPP-445
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-445
>             Project: Shibboleth SP - C++
>          Issue Type: Bug
>          Components: Other
>    Affects Versions: 2.4.3
>            Reporter: Ian Young
>            Assignee: Scott Cantor
>
> If you have a bare "WAYF" type SessionInitiator in shibboleth2.xml as follows:
>    <SessionInitiator id="foo" Location="/foo" acsIndex="5"
>       URL="...whatever..."/>
> Then the automatically generated metadata will include something like this:
>    <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
>       Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
>       Location="https://sh2testsp1.iay.org.uk/Shibboleth.sso/foo"/>
> However, actually sending a session initiation message to that location results in a configuration error:
> shibsp::ConfigurationException at (https://sh2testsp1.iay.org.uk/Shibboleth.sso/foo)
> Configured Shibboleth handler failed to process the request.
> It would be better only to generate endpoints with that binding if the configured session initiator supported it.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the commits mailing list