bogus ACS URL in authnRequest

Peter Schober peter.schober at univie.ac.at
Sun Jun 3 17:59:34 BST 2012


* Cantor, Scott <cantor.2 at osu.edu> [2012-06-03 18:04]:
> On 6/3/12 11:55 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >
> >Of course I found it in the archives after posting,
> >cf. thread with subject: "transient problem with ACS URL",
> 
> If you have a copy of 2.5 alpha to test with, I believe that it should now
> solve this problem because it handles relative URLs by promoting them to
> the vhost being used. So I think it will work by taking off the hostname
> portion in seraph-config.xml's redirects, and eliminating the double
> hostname in the affected cases. The other cases will just use relative
> paths as the relay state value.

Thanks. The affected confluence instance is in production (so I'll not
upgrade to 2.5 there, not that you suggested that) and setting up
another historic confluence instance on a test SP is slightly more
pain I'm willing to inflict on myself atm.

Feeding the same broken query string (two hostnames) to the 2.5 SP
(lacking a comparable confluence test instance) does not change the
behaviour, of course. Again, not that you said it would.

I'll look into rewriting the requestes then, thanks.
-peter


More information about the users mailing list