URL is malformed

[Douglas Spooner]

Hi

Using Shib SP 2.5.1.0 x64 on Windows 2008.

Our developers have given me a new version of their application that supports us providing shibboleth authentication to people to test out in UAT.

The new version is made of two parts our own WAYFless system and then an application that sits behind the shib ISAPI filter.

It seems with the new version of this application once I've logged into an IDP and then redirected the SP I'm seeing this error. (I think it's the WAYFless part causing the issue)

xmltooling::IOException at (https://mysp.mysite.org/Shibboleth.sso/SAML2/POST)

URL is malformed.

The basic flow without too much detail:

Restricted Content > Our WAYFless Portal > Pick your Fed > Pick your IDP > redirect to our SP with entity in QS > IDP Auth > redirect to SP > Our app creates a session to our restricted content > redirects to restricted content page

Last time we encountered this error it was because the entity ID's being passed to the SP weren't being URL encoded properly but this time around it seems to be when the IDP is redirecting back to our SP.

If I revert to the previous version of our WAYFless application it works fine so I'm pretty certain it's something they have changed. Also I can craft a request like this to our SP and works without issue.

https://mysp.mysite.org/Shibboleth.sso/Login?entityID=https%3a%2f%2fidp.cardiff.ac.uk%2fshibboleth

I've turned up all the logging to debug in native but it still doesn't give me any clue as to what it thinks is malformed, is there a way to get it to tell me what it doesn't like?

2013-06-12 16:29:14 ERROR Shibboleth.ISAPI [3472] isapi_shib_extension: URL is malformed.

Would  anyone offer any advice or where I might start looking

Thanks

Doug


DISCLAIMER:

This communication (including any attachments) is intended for the use of the addressee only and may contain confidential, privileged or copyright material. It may not be relied upon or disclosed to any other person without the consent of the RSC. If you have received it in error, please contact us immediately. Any advice given by the RSC has been carefully formulated but is necessarily based on the information available, and the RSC cannot be held responsible for accuracy or completeness. In this respect, the RSC owes no duty of care and shall not be liable for any resulting damage or loss. The RSC acknowledges that a disclaimer cannot restrict liability at law for personal injury or death arising through a finding of negligence. The RSC does not warrant that its emails or attachments are Virus-free: Please rely on your own screening. The Royal Society of Chemistry is a charity, registered in England and Wales, number 207890 - Registered office: Thomas Graham House, Science Park, Milton Road, Cambridge CB4 0WF
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130612/d6627128/attachment.html