regex in cas-protocol.xml

[Paul B. Henson]

On Mon, Feb 22, 2016 at 08:43:18PM +0000, Marvin Addison wrote:

> That. What you provided should be equivalent.

Hmm, so I finished setting up CAS support on my dev idp3 system and
pointed our test ezproxy system at it, but it seems it's not happy with
my regex and it's treating it like an unverified relying party and
denying it access. The entry looks like:

	c:regex="^http(s)?://(login\.)?proxy\.library\.cpp\.edu/login"

I turned on debugging, and it showed:

2016-02-22 20:02:21,077 - DEBUG
[net.shibboleth.idp.cas.service.PatternServiceRegistry:85] - Evaluating
whether
https://login.proxy-dev.library.cpp.edu/login?qurl=ezp.2aHR0cHM6Ly9sb2dpbi5wcm94eS1kZXYubGlicmFyeS5jcHAuZWR1L215Z3JvdXBz
matches ^http(s)?://(login\.)?proxy-dev\.library\.cpp\.edu/login
[...]
2016-02-22 20:02:21,081 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:299]
- Profile request is unverified, returning configuration
  shibboleth.UnverifiedRelyingParty

perl is happy with the regex:

"https://login.proxy-dev.library.cpp.edu/login?qurl=ezp.2aHR0cHM6Ly9sb2dpbi5wcm94eS1kZXYubGlicmFyeS5jcHAuZWR1L215Z3JvdXBz" =~ m#^http(s)?://(login\.)?proxy-dev\.library\.cpp\.edu/login# && print "matches\n"

works fine. Is there some difference between PCRE and java I'm missing?
Arguably it's probably a complicated regex test case but it was the easiest
service I could break at a moments notice :).

Thanks...

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768