transient problem with ACS URL

[Timo Tunturi]

Hi,

Sometimes (rarely) a SP asks for attributes to be returned to a broken url:

'https://FQDNhttps:/Shibboleth.sso/SAML2/POST'

Anyone ran into this? There is an extra "https:" in the url.

The IdP is the Aalto University one with roughly a million logins per 
month. We get these ACS-URL-problems to the tune of 50 per day, so the 
problem occurs quite rarely.

IdP: 2.3.5 with uApprove 2.4.0 and in-house-written combined 
Kerberos-SSO/UsernamePassword login handler
SP: 2.4.3 with fresh dependencies. Either from the binary rpm packages 
on Redhat or compiled with Oracle Solaris Studio 12.2 on Solaris 10.

Oddly enough the problem only seems to occur with services running on 
Solaris. Hard to say because the vast bulk of logins go to services 
running on Solaris, anyway.

-- 
Timo Tunturi, Aalto University IT