Shibd crashing on LogoutRequest

Yannick Béot yannick.beot at gmail.com
Tue Jul 10 02:12:44 EDT 2012


Hi,

Indeed, by putting a  ERROR level in shibd.logger, the LogoutRequest is
correctly decoded and I get an "expiration" error.
I'm using log4shib-1.0.3-2.1.

Nothing fancy in the dependencies:
# rpm -qR log4shib-1.0.3-2.1
/sbin/ldconfig
/sbin/ldconfig
libc.so.6()(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libgcc_s.so.1()(64bit)
libgcc_s.so.1(GCC_3.0)(64bit)
liblog4shib.so.1()(64bit)
libm.so.6()(64bit)
libnsl.so.1()(64bit)
libstdc++.so.6()(64bit)
libstdc++.so.6(CXXABI_1.3)(64bit)
libstdc++.so.6(CXXABI_1.3.1)(64bit)
libstdc++.so.6(GLIBCXX_3.4)(64bit)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rtld(GNU_HASH)

Regards,

Yannick

On Mon, Jul 9, 2012 at 11:41 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/9/12 5:36 PM, "Yannick Béot" <yannick.beot at gmail.com> wrote:
>
> >I reproduced the problem with the exact same request catch from apache
> >access logs during the previous crash.
>
> Hmm, ok. That's puzzling since it would have to have expired there also,
> so that means it did fail in the decoding step.
>
> Logging comes to mind, but you're on RHEL5, and that shouldn't have any
> issues with broken logging code by now.
>
> Nevertheless, if you're logging protocol messages in the SP, turn down
> logging and try it again.
>
> -- Scott
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120710/b6deb775/attachment.html 


More information about the users mailing list