<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-27fb56c5-2383-42c7-9b69-e1ce59a91391" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="805d48a11458f49e376471107ac81fbca0d6e6dafde5e26623c19eaed10d97ee@https://login.idp.eduid.se/idp.xml" id="email_805d48a11458f49e376471107ac81fbca0d6e6dafde5e26623c19eaed10d97ee@https://login.idp.eduid.se/idp.xml" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=805d48a11458f49e376471107ac81fbca0d6e6dafde5e26623c19eaed10d97ee%40https%3A%2F%2Flogin.idp.eduid.se%2Fidp.xml" style="color:#0052cc;; color: #3b73af; text-decoration: none">805d48a11458f49e376471107ac81fbca0d6e6dafde5e26623c19eaed10d97ee@https://login.idp.eduid.se/idp.xml</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1655" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-93821071-335e-4c09-b196-667a9419dfc0" height="16" width="16" border="0" align="absmiddle" alt="Improvement"> IDP-1655</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1655" style="color: #3b73af; text-decoration: none">Re: Enhance CAS EncodingTicketService to support root proxy-granting tickets</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">Ok; I went ahead and cherry-picked the final commit for <a href="https://issues.shibboleth.net/jira/browse/IDP-1655" title="Enhance CAS EncodingTicketService to support root proxy-granting tickets" class="issue-link" data-issue-key="IDP-1655" style="color: #3b73af; text-decoration: none">IDP-1655</a>, along with the fix for <a href="https://issues.shibboleth.net/jira/browse/IDP-1658" title="httpclient sockets stuck in CLOSE_WAIT break CAS proxy callback" class="issue-link" data-issue-key="IDP-1658" style="color: #3b73af; text-decoration: none"><del>IDP-1658</del></a> to the 4.0.1 release code, plus cherry-picked <a href="https://issues.shibboleth.net/jira/browse/IDP-1223" title="IdPv3 defaults to insecure cookies" class="issue-link" data-issue-key="IDP-1223" style="color: #3b73af; text-decoration: none"><del>OSJ-223</del></a> onto the java-opensaml 4.0.1 release code, and compiled all of that into what I'm planning to use for production until an official release comes out with them.</p> <p style="margin: 10px 0 0 0">Testing with that looks good; I started off testing our app that uses proxy. The client acquired a ST:</p> <p style="margin: 10px 0 0 0">2020-10-01 16:26:11,653 - 10.104.223.252/node01w8bj5zpudp4m6l7eobh900cj890 - INFO [net.shibboleth.idp.cas.flow.impl.Gran<br> tServiceTicketAction:197] - Profile Action GrantServiceTicketAction: Granted service ticket for <a href="https://www.idm.unx.cpp" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://www.idm.unx.cpp</a>.<br> edu/webui-dev</p> <p style="margin: 10px 0 0 0">which was validated by the proxy service:</p> <p style="margin: 10px 0 0 0">2020-10-01 16:26:11,875 - 2620:df:8000:ff10:0:1:247:16/node01t8074qjdib0nng7pl1gherfn895 - INFO [net.shibboleth.idp.cas.<br> flow.impl.ValidateTicketAction:153] - Profile Action ValidateTicketAction: Successfully validated ST-AADXGZLDOJSXIMOZIRB<br> VOMP4PMHSTWC4LMKRS6OYR5OY6Z3H53KCDEKIJ6NHUUV7UEOBTZWLJXG25VYB7WUZVBULHLZDA4G2NC6NIXUHKTCXE4XCWPIODHAMVDZ7WLGDGMKJ3GVRH2Q<br> LGEDUMENJVCNC37ZK7J6WSNYZS7BIA7OX3VG3CWQKLCQDNWPCV3DGLGC4NBA45EL7R2QZ7VYNVKOLJXMIGZ34GBQUFGAG4JC4IP45PIGMT7Y3G763AHMS7R7<br> SPHWJP724TNJFN2SLZDD5FG4AXA7UPK4VEVAJTO5HW37HC6ZIBJ6K477CA35FJGYXJE4FOQXQTK6MMADNQB5XSDEQ6GJCIRVNDGUTWUJXPNKJDHN3JC3PH5Y<br> QW--- for <a href="https://www.idm.unx.cpp.edu/webui-dev" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://www.idm.unx.cpp.edu/webui-dev</a></p> <p style="margin: 10px 0 0 0">and resulted in an encoded PGT:</p> <p style="margin: 10px 0 0 0">134.71.246.199 - - <span class="error">[01/Oct/2020:16:26:11 -0700]</span> "GET /cas_pgt-dev?pgtId=PGT-E-AADXGZLDOJSXIMOMYIH7ZHGBEMQGRJFUHSPJV63RV4WH4PD25FTOGFMBZSRLCDHMVMPAJ7BLLOVSWTILR2XL3FB6FVV4ZEOYX4AJPDHWAPIXOW37YK7XPH5VDFBJ4ZN7MDJ7HYKDSFNPX4BUFDJLIBLSDL6KJRXN4KXJK523XXNAS4UCXNLLZ7HH7MI2SI5KYVRY57SL47AMA7Z54TGJN6FUP6MGIA2FI2VEYRRBRB535DKLNQC3RREL4O2K5B2H3DTRHJ3JFJC2KMTOXHNKJKWCU6443EG6AXW3YND5AKGOFXEXGEYLXXWFBVBRSEDDCIDSOG5EKTWOPQ4FHFPIVYCJCLUA5KBCMMMHTLWMYMA5SSCJIBNA---<del>&pgtIou=PGTIOU-1601594771875-Afhp3z9YIXiPxAHbAJVz8cIMV5nFupivDXyNjuzTjEpC0SIQko HTTP/1.1" 200 561 "</del>" "ShibbolethIdp/4.0.1 OpenSAML/4.0.1"</p> <p style="margin: 10px 0 0 0">which was used to get a PT for the proxied to app:</p> <p style="margin: 10px 0 0 0">2020-10-01 16:26:18,676 - 2620:df:8000:ff10:0:1:247:16/node06byya767120c1j8n08ny6h5t0900 - INFO <span class="error">[net.shibboleth.idp.cas.flow.impl.GrantProxyTicketAction:207]</span> - Profile Action GrantProxyTicketAction: Granted proxy ticket for <a href="https://dev.idm.unx.cpp.edu/cas/user/henson" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://dev.idm.unx.cpp.edu/cas/user/henson</a></p> <p style="margin: 10px 0 0 0">which was then validated:</p> <p style="margin: 10px 0 0 0">2020-10-01 16:26:18,776 - 134.71.246.30/node0zi5wexhhubk4oi35r5xycaf3901 - INFO <span class="error">[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:153]</span> - Profile Action ValidateTicketAction: Successfully validated PT-AADXGZLDOJSXIMLDUQ2TJCG5YQOQOGOBIT2I2YU23S7Q5MMHUU4JPKOLU25ZLFGZJH7GNYQGVVX6QRKNESGOYQP7BWDPAL64ZLSKCZKZVBZY7J4CWP4IP4IUIRBH574VAFYLGWV4U43JZ7DTDDK3QDKNHRTL27IJ4LKNPXNEFPSCV5BAJMMPHUKVQE6Z4NQHOF46U7PBS4BPFAPULT7SG6LVALOHH3DZ2MWXEYJ3T66N4SYPV2BLPLWJ4HLRLXHKIUMYVW74NEF2GQ4AUP3AIVECSXY6BAHLKO4GUI7WZNYF3XIZCDUIQ2UXBGVJHZRZ7BZDA7AEQF6ZIYIZZ7PAPHWW2CTT6N2RATIYX7KGGPKKEEBTI5JLGUQQL2KXFVTWPAIXIXLWGS7I77Q63MVXNPCLI4J5KTJ42JY3BBMFREZO2ZBBRFFLCM5AXHUJZFDU3DSXAOSQXT5TLCRZ7XAAYIQNH6X574R6QU4Z2Y35YXJXUFJVMZSESLNJXL2XRURQEXVUBGFAUABVLUTTK7EDBJLOMEKDNQ4TH5CFEI75S443JSSHVY4UIMW4LO7WFWSXYC7LFSVSU6TWH45RJ3PSDMXVKGYLDQFWGGC5ZEQRUIDRKV345GTDUZLZZVDHIVYWC3JKBFHHVPYBLZ6TGQHFBVRKYTEHFLBXTZSUF5N4BJX5EI7WAISGSDHAOBJLDI4YEL54FCGR2VSIE5R24PBUUDOFLQRGPOPKHE2776VSUTJV6HP4SM4V5YLVCCMUYUG64R44QAPZOCWAW77R6VCJAS5AFJUMW4GYS7Z6ORWNEVZPWD7AYOH5DP4YE6V3WJBB2GSIE5OIEGOKHR25A7L6Y--- for <a href="https://dev.idm.unx.cpp.edu/cas/user/henson" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://dev.idm.unx.cpp.edu/cas/user/henson</a></p> <p style="margin: 10px 0 0 0">At this point, I synthesized a request for another PT using the encoded PGT:</p> <p style="margin: 10px 0 0 0">curl 'https://beric-dev.idp-dev.cpp.edu/idp/profile/cas/proxy?pgt=PGT-E-AADXGZLDOJSXIMOMYIH7ZHGBEMQGRJFUHSPJV6<br> 3RV4WH4PD25FTOGFMBZSRLCDHMVMPAJ7BLLOVSWTILR2XL3FB6FVV4ZEOYX4AJPDHWAPIXOW37YK7XPH5VDFBJ4ZN7MDJ7HYKDSFNPX4BUFDJLIBLSDL6KJR<br> XN4KXJK523XXNAS4UCXNLLZ7HH7MI2SI5KYVRY57SL47AMA7Z54TGJN6FUP6MGIA2FI2VEYRRBRB535DKLNQC3RREL4O2K5B2H3DTRHJ3JFJC2KMTOXHNKJK<br> WCU6443EG6AXW3YND5AKGOFXEXGEYLXXWFBVBRSEDDCIDSOG5EKTWOPQ4FHFPIVYCJCLUA5KBCMMMHTLWMYMA5SSCJIBNA----&targetService=https%3<br> A%2F%2Fwww.idm.unx.cpp.edu%2F'</p> <p style="margin: 10px 0 0 0"><?xml version="1.0" encoding="UTF-8"?><br> <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas"><br> <cas:proxySuccess><br> <cas:proxyTicket>PT-AADXGZLDOJSXIMOOKT62UO56XRXIBBM4ZZ6QUYTA7EZ5EPHYRD2F64D2KRXCDIDJIQA2CPPVSN6WF4UBI4YTPLGDPKES2X4O<br> XBUVYGHKUIIRQ24TFXWI2LSXW4UVZ4FTODFRTHMEXF3LJOAWO2ZFOWNV3XNJUOZP55RUY5ZU26TNEXT4LM5Y2THCTEAINZP76YE654NIFZIDQIQPLZOBJZ7X<br> XMADSS5V77BV57YDZVMTEJZ4KHJCYL556POAWNWECBAQMK4VV3DPIWXKPRU73FSERGCUE3PF2ZZGSAGNYAEVXRPJA754HI5PRII65NEVJYPHGTN4RMHMJR5U<br> OTCSHQQH3NGYRSXEZEHTQCZLIMRSVSUXX3XKJHOVHPSSASWKRXFMWMQGBUFPJOPWVTXBZUVOKDYNYILSDUAP42N4YPHMACIXASJHIUV6M3B45GJJPB3OKZBL<br> WI2YG3MGSFJENKE62AR3P4Y7KX6WLKWRBL666BM5WZYDYYJZSPUJEIOWELF2TFGHHK3VXNYH2IP5FUAWB7465PHMO4PWVB6XUR7SSRZQSF6IRCCDLYHZ7PFB<br> 4PSZS42FNYDOJGO7KKIFAZ4MTFEKOOTJCLVHXP2XEQOY52KWPXSF4N5DDMGGETVEKFKDMDRN74TFIIE6MYFHKQONFXA3ICL6PACMZTMXDZXHXV5G5H5V62IF<br> 6OVWPXE2TPNJXIP3VFEDYCB65TRSRH6SUBZDAITHLDJJDVTNT2ROZCCVDUWHKI7UNIEJKKUY2VYNEGBJSQA46N6O3XSLD5PCAGUXT3C6CUP4VCURUBTLX7H3<br> GNNQ4WIGFSBDZCPH3TEDHSODDFOWA---</cas:proxyTicket><br> </cas:proxySuccess><br> </cas:serviceResponse></p> <p style="margin: 10px 0 0 0">and used the PT to acquire another chained PGT:</p> <p style="margin: 10px 0 0 0">curl 'https://beric-dev.idp-dev.cpp.edu/idp/profile/cas/proxyValidate?ticket=PT-AADXGZLDOJSXIMOOKT62UO56XRXIBB<br> M4ZZ6QUYTA7EZ5EPHYRD2F64D2KRXCDIDJIQA2CPPVSN6WF4UBI4YTPLGDPKES2X4OXBUVYGHKUIIRQ24TFXWI2LSXW4UVZ4FTODFRTHMEXF3LJOAWO2ZFOW<br> NV3XNJUOZP55RUY5ZU26TNEXT4LM5Y2THCTEAINZP76YE654NIFZIDQIQPLZOBJZ7XXMADSS5V77BV57YDZVMTEJZ4KHJCYL556POAWNWECBAQMK4VV3DPIW<br> XKPRU73FSERGCUE3PF2ZZGSAGNYAEVXRPJA754HI5PRII65NEVJYPHGTN4RMHMJR5UOTCSHQQH3NGYRSXEZEHTQCZLIMRSVSUXX3XKJHOVHPSSASWKRXFMWM<br> QGBUFPJOPWVTXBZUVOKDYNYILSDUAP42N4YPHMACIXASJHIUV6M3B45GJJPB3OKZBLWI2YG3MGSFJENKE62AR3P4Y7KX6WLKWRBL666BM5WZYDYYJZSPUJEI<br> OWELF2TFGHHK3VXNYH2IP5FUAWB7465PHMO4PWVB6XUR7SSRZQSF6IRCCDLYHZ7PFB4PSZS42FNYDOJGO7KKIFAZ4MTFEKOOTJCLVHXP2XEQOY52KWPXSF4N<br> 5DDMGGETVEKFKDMDRN74TFIIE6MYFHKQONFXA3ICL6PACMZTMXDZXHXV5G5H5V62IF6OVWPXE2TPNJXIP3VFEDYCB65TRSRH6SUBZDAITHLDJJDVTNT2ROZC<br> CVDUWHKI7UNIEJKKUY2VYNEGBJSQA46N6O3XSLD5PCAGUXT3C6CUP4VCURUBTLX7H3GNNQ4WIGFSBDZCPH3TEDHSODDFOWA---&service=https%3A%2F%2<br> Fwww.idm.unx.cpp.edu%2F&pgtUrl=https%3A%2F%2Fwww.idm.unx.cpp.edu%2Fcas_pgt'</p> <p style="margin: 10px 0 0 0">which, as expected, was stored rather than encoded:</p> <p style="margin: 10px 0 0 0">134.71.246.199 - - <span class="error">[01/Oct/2020:16:55:26 -0700]</span> "GET /cas_pgt?pgtId=PGT-1601596526066-tcSWYiS0P5WAr11s47IndSHGc6OHjDoiSTB85QsnDvHADXTY6c&pgtIou=PGTIOU-1601596526067-4zbnq7rEfISrSYNNu0TmPxDPTSSDVFhlnACWzgcB6qTOn0ASVU HTTP/1.1" 200 561 "-" "ShibbolethIdp/4.0.1 OpenSAML/4.0.1"</p> <p style="margin: 10px 0 0 0">I used that PGT to get another PT:</p> <p style="margin: 10px 0 0 0">davos ~ # curl 'https://beric-dev.idp-dev.cpp.edu/idp/profile/cas/proxy?pgt=PGT-1601596526066-tcSWYiS0P5WAr11s47IndSHGc6OHjDoiSTB85QsnDvHADXTY6c&targetService=https%3A%2F%2Fmy.cpp.edu%2F'<br> <?xml version="1.0" encoding="UTF-8"?><br> <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas"><br> <cas:proxySuccess><br> <cas:proxyTicket>PT-AADXGZLDOJSXIMPZIMYEKZ4CJVCEVGCKIWBBXERHEU5BFUVF6R3DKDKITOIROCNJSIKGQBAE4QPQTTMZ654OZGXJT5ONIFU5<br> 4WVNEBC4WUXGPCPATRCI3ABYN6J7DL5QRPC4R55M4A2VL3NSLP33GIZFHFHGKS3HZQWEIEVLY5S5OSQZ3OSRBSZR24ZUVBYFR7X4NMPQWUMURFD4TOSAYLU7<br> OYED5RROSGAL5LRJ47JNDC67WDSEAEV6FKCTRVFGT7OPUUS33PSS5TCGHINC3XL6TV7L2BRXZFM2HUYPKL362L7HHWTD4FLZAUVZHKSXOTFAEXB5ZUSW6FHW<br> V72QGMBLYAGCICAOLRXJWXJ33N2ZM2QMESSF73FUTKUIKBG7P34S32HRIBEAWYRICA7BHZOJK4ARGREDE52NTIEF6FMVPADX3LSAZZE5OPGZH4MNLE------<br> </cas:proxyTicket><br> </cas:proxySuccess><br> </cas:serviceResponse></p> <p style="margin: 10px 0 0 0">and successfully validated it:</p> <p style="margin: 10px 0 0 0">curl 'https://beric-dev.idp-dev.cpp.edu/idp/profile/cas/proxyValidate?ticket=PT-AADXGZLDOJSXIMPZIMYEKZ4CJVCEVG<br> CKIWBBXERHEU5BFUVF6R3DKDKITOIROCNJSIKGQBAE4QPQTTMZ654OZGXJT5ONIFU54WVNEBC4WUXGPCPATRCI3ABYN6J7DL5QRPC4R55M4A2VL3NSLP33GI<br> ZFHFHGKS3HZQWEIEVLY5S5OSQZ3OSRBSZR24ZUVBYFR7X4NMPQWUMURFD4TOSAYLU7OYED5RROSGAL5LRJ47JNDC67WDSEAEV6FKCTRVFGT7OPUUS33PSS5T<br> CGHINC3XL6TV7L2BRXZFM2HUYPKL362L7HHWTD4FLZAUVZHKSXOTFAEXB5ZUSW6FHWV72QGMBLYAGCICAOLRXJWXJ33N2ZM2QMESSF73FUTKUIKBG7P34S32HRIBEAWYRICA7BHZOJK4ARGREDE52NTIEF6FMVPADX3LSAZZE5OPGZH4MNLE------&service=https%3A%2F%2Fmy.cpp.edu%2F'<br> <?xml version="1.0" encoding="UTF-8"?><br> <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas"><br> <cas:authenticationSuccess><br> <cas:user>henson</cas:user><br> <cas:proxies><br> <cas:proxy><a href="https://www.idm.unx.cpp.edu/" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://www.idm.unx.cpp.edu/</a></cas:proxy><br> <cas:proxy><a href="https://www.idm.unx.cpp.edu/webui-dev" class="external-link" target="_blank" rel="nofollow noopener" style="color: #3b73af; text-decoration: none">https://www.idm.unx.cpp.edu/webui-dev</a></cas:proxy><br> </cas:proxies><br> </cas:authenticationSuccess><br> </cas:serviceResponse></p> <p style="margin: 10px 0 0 0">Everything looks good. I can repeat this test with a 4.1 snapshot if necessary once one is built with the patch applied.</p> <p style="margin: 10px 0 0 0">Thanks much!</p> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0"> </p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1655#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-4f4de618-9154-4309-8728-d0fc8099d786" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1655#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v8.5.4#805004-<span title="0444eab799707f9ad7b248d69f858774aadfd250" data-commit-id="0444eab799707f9ad7b248d69f858774aadfd250}">sha1:0444eab</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>