IdP 3: error on SAML 1 AttributeQuery

[Sara Hopkins]

Thanks for your help with this, Scott; my client managed to get it working.

On 19/03/2015 12:49, Sara Hopkins wrote:
> On 18/03/2015 20:13, Cantor, Scott wrote:

> OIC, thanks Scott, it's very useful to know that. Apparently it's not
> being set to false in the config so I'll find out about the plug-in.

He does have the SOAP plug-in installed. He used the .msi installer, 
which appears to install the plug-in by default (I haven't had the 
chance to check the Windows installer out myself yet).

>> Or it's just not Jetty alone, it's Jetty behind something else,
>> Apache, load balancer, whatever.
>
> Yes, that's a possibility too. They've got MS Forefront but I'm having
> trouble understanding the explanation of how it's set up. I'll probe
> further.

It does look as if something, presumably Forefront, was tampering with 
the packets on the back-channel, though I don't see why, as they 
certainly hadn't intentionally set up SSL termination on port 8443. 
Anyway, he worked around it by installing another network interface 
exposed directly to the internet.

Sara
-- 
Sara Hopkins
Support Team
UK Access Management Federation for Education and Research
web:    http://www.ukfederation.org.uk/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.