Really strange authorization issue.

Cantor, Scott cantor.2 at osu.edu
Fri Aug 14 14:23:36 EDT 2015


On 8/14/15, 2:18 PM, "users on behalf of mat houser" <users-bounces at shibboleth.net on behalf of mhouser at uwm.edu> wrote:

>The clock on the failing node was just a little under a minute in the
>future, which most SPs didn't seem to care about, but exlibris evidently
>did.

That means they probably have a bug. A minute is an overly strict clock skew to be applying (indicating they likely aren't allowing any, which is not acceptable in an implementation).

-- Scott



More information about the users mailing list