Shibboleth SP 2.5.1 and CentOS 5.8 x64

Cantor, Scott cantor.2 at osu.edu
Tue Jan 8 23:01:53 EST 2013


On 1/8/13 10:25 PM, "Dan McLaughlin" <dmclaughlin at tech-consortium.com>
wrote:

>I can email you the raw HTTP POST.  What email address can I send it to?

I received it, and bingo, it crashed. Is there something setting the
cookie other than the SP? I'm guessing yes. I think I know what the
trigger is, if not why it broke only now, but since this is technically a
DOS issue, I will have to treat it as a security issue. I'll send you
something separately on it. The fix should be an opensaml patch.

-- Scott




More information about the users mailing list