Attributes not appearing in .Net Request.Headers collection

[Martin Robinson]

Scott,

I got my debug build of isapi_shib.dll working, and very quickly found the problem...

All my attribute values had leading whitespace - by virtue of a XML-formatter that I'd run over the SAML Response to make it readable and editable. This had resulted in the attributes appearing as (for example)

<saml:Attribute Name="Division">
        <saml:AttributeValue xmlns:q6="http://www.w3.org/2001/XMLSchema"
        p7:type="q6:string"
        xmlns:p7="http://www.w3.org/2001/XMLSchema-instance">
	FINANCE AND OPERATIONS</saml:AttributeValue>
</saml:Attribute>

I could see using the debugger that ServiceProvider::doExport was indeed looping through all the attributes and calling SetHeader as expected. 

The call to m_pn->SetHeader in isapi_shib.cpp was returning TRUE (success), yet the attribute was not appearing in the .net Request.Headers collection. Somewhere within IIS and/or .Net, headers are being removed or ignored if their value starts with a space! 

Is this perhaps because attribute values should actually be URL-Encoded?

A more general question: How SHOULD attribute values be handled if they contain non-ASCII characters, such as a name like "Süß"? Will they appear in the .Net headers collection as UTF-8 or what?

Thanks,

Martin




-----Original Message-----
From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 09 June 2015 18:52
To: Shib Dev
Subject: Re: Building SP from source on Windows with VS2010 missing Versions.props and Includes.props

On 6/9/15, 5:04 PM, "Martin Robinson" <martin.robinson at dai.co.uk> wrote:



>It seems there is yet another dependency missing: "boost".  There is no 
>mention of this on the NativeSPWindowsSourceBuild page.

Boost is all source code, but I'll update the page, it's out of date I'm sure.

>All I actually need is a PDB file to allow me to debug using the 
>debug-build DLL that actually ships with the SP installer.  Is that 
>available anywhere?

I don't know that that's actually all you would need, but I can get the symbols uploaded at some point. But I don't know when.

-- Scott

--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net