Message decoding error

[Mark Boyce]

Keith,

What does the SSP Auth Source look like?

Thanks,

Mark

Mark L. Boyce
Senior Identity Management Analyst
University of California, Office of the President


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Wessel, Keith
Sent: Monday, March 07, 2016 2:55 PM
To: Shib Users
Subject: RE: Message decoding error

Ah, that makes sense that one would zip the redirect binding parameters. Thanks for that clarification.

No, not OpenJDK. Oracle Java 8 update 74.

Tom, I'd be happy to post the SAML authn request if I can get it. Turning upt he OpenSAML logging to DEBUG didn't seem to log it. Will I need to grab it with an SAML trace, or is there a way to make the IDP log it?

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, March 07, 2016 4:43 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Message decoding error

On 3/7/16, 5:37 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:


>
>I'm confused why it's trying to decode at this point, and I'm confused what zip compression has to do with anything.

The SAML Redirect binding is an unsigned XML document run through a DEFLATE and then URL encoded. ZIP is basically DEFLATE plus an additional bit of padding, so inflating it is done with the Java zip stream class.

> I'm not sure where to go with this. Does anyone have any suggestions what I might look at?

Well, you can always run the message through FEIDE's SAML debugger that decodes redirect messages, but I'm not aware of any real interop problems of that trivial a nature.

Don't suppose this is OpenJDK?

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net