Unable to use wildcard in hostmatch

[Amit Thukral]

Hi,

I am using shibboleth2.xml for picking up configuration for shibboleth.
However, there are use cases when we don't want to do the exact hostmatch
or do something for all hosts.

Following is the configuration:

*<Host name="host3.com <http://host3.com>" scheme="https" port="443"
applicationId="smlsvc_pol7" authType="shibboleth" requireSession="true"/>*

The above configuration works fine for all URLs for host3, perfect.

But if I configure wildcard character with hostname e.g.

*<Host name="host*.com" scheme="https" port="443"
applicationId="smlsvc_pol7" authType="shibboleth" requireSession="true"/>*

This doesn't work.
Tried it doing following way as well:

*<Host name="host*.com" scheme="https" port="443"
applicationId="smlsvc_pol7">*
*<Path name="*" authType="shibboleth" requireSession="true"/>*
*</Host>*


But it fails in following code for the wildcard case:
samlsp::ServiceProvider::doAuthentication

281        if ((!requireSession.first || !requireSession.second) &&
!requireSessionWith.first &&
  (!authType.first ||
m_authTypes.find(boost::to_lower_copy(string(authType.second))) ==
m_authTypes.end()))
283             return make_pair(true, request.returnDecline());

(gdb) p authType.first
$10 = false
(gdb) p requireSession
$11 = {first = false, second = false}

Can somebody let me know the way to fix it ?

Thanks in advance !!
Regards,
Amit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160225/21380d52/attachment.html>