Incorrect ECP Accept header

John Dennis jdennis at redhat.com
Sun Aug 23 10:28:41 EDT 2015


On 08/21/2015 02:26 PM, Cantor, Scott wrote:
> On 8/21/15, 12:10 AM, "users on behalf of John Dennis"
> <users-bounces at shibboleth.net on behalf of jdennis at redhat.com>
> wrote:
>>
>> 1) The SAML specs need to be edited (I checked the most recent
>> errata and the error is still there).
>
> I'll try and remember to file something in the Jira if I can actually
> access it, but since this is a non-normative correction...There's
> nobody to do it but me and I'm not spending that kind of time until
> something material that needs correcting comes up (just being up
> front about it).

Understood. I totally get editing the docs for a 1 character change is a 
pain.

We've seen several instances of folks cutting and pasting from one of 
the SAML docs and then being surprised when it doesn't work. The 
response is usually "it must be correct, it's in the specification" 
which is then followed by "it works in Shibboleth" therefore it's 
correct. Any chance it could simply be added to an errata or web page 
just to be able to point folks to something that says yes this is a 
known mistake and here is the correct syntax?

>
>> 2) mod_shib consumes a syntactically incorrect header and processes
>> the request without error.
>
> Well, technically, yes. Practically this is a non-issue for the SP
> since it's simply being more expansive in handling the requests. That
> content type is totally specific to ECP and would never show up
> anywhere else, so the impact is pretty slight. But you're welcome to
> file the bug for whenever the next patch is done.

Will do. Thank you Scott.

https://issues.shibboleth.net/jira/projects/SSPCPP/issues/SSPCPP-668

-- 
John


More information about the users mailing list