New Shibboleth daemon on new server - user/wayf page just reloads over and over

Ben Turner bturner at educause.edu
Thu Sep 12 16:01:30 EDT 2013


I just realized that I didn't include the new URLs that we have.

The login page is https://new.educause.edu/user/login and the InCommon link now appears as https://new.educause.edu/Shibboleth.sso/DS?target=https%3A%2F%2Fnew.educause.edu%2Fshib_login%2Fhome

Ben

________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Thursday, September 12, 2013 10:23 AM
To: Shib Users
Subject: Re: New Shibboleth daemon on new server - user/wayf page just  reloads over and over

FWIW, I just tried manually injecting a query string of similar form into
an SP and it worked, so I'm not sure why yours doesn't.

I will note however that you said, and I dearly hope you mispoke, that
you're running 2.3.1, which is:

a) ancient
b) unsupported
c) completely insecure

So, I suppose if that's true, I'd suggest you upgrade to a supported
version if you can't figure out what's causing the extra ampersand. It may
be something changed in the code that would work around the issue since
I'm not seeing it fail.

What's very odd is that to have to request the DS again, it isn't seeing
the SAMLDS=1 parameter either. If the code saw that, it would fail instead
of looping back. It isn't meant to be doing that.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list