Shib SP ECP - a few woes

[Scott Koranda]

On Tue, Oct 15, 2013 at 5:38 PM, Giovanni Bajo <rasky at develer.com> wrote:

> Hello,
>
> I'm working on deploying SAML in our infrastructure. As a first step, I
> deployed Shib as a SP for most services using Web Browser SSO, with
> mod_shib in Apache; that worked correctly. I am now working on configuring
> ECP for a few clients/services that require it.
>
> The clients that need to talk via ECP to the services are mostly written
> in Python; I've thus started prototyping ECP implementation using ecp.py
> (found here: https://wiki.shibboleth.net/confluence/display/SHIB2/ECP).
>
> To make ecp.py work correctly to the end, I had to make two patches to its
> code; I would like to know whether they make sense or not:
>
> 1) When POSTing to the IdP, I had to explicitly add a Content-Type header
> with value "text/xml" to the request, otherwise my IdP wouldn't recognize
> it as a SOAP/ECP request; by default, Python urllib sends Content-Type:
> application/x-www-form-urlencoded, which is surely wrong for a SOAP message.
>
>
>
Thanks for catching that. I have modified the ecp.py Python demonstration
client and updated it on the wiki.

Cheers,

Scott K
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131219/77efe08e/attachment.html