Shibboleth XML parser - issues with parsing dash character

[Alvin Leung]

Hi,



We have set up a Shibboleth SP with Apache 2.4 and Tomcat 8 on a Windows
Server and have successful integrated the SP with an external IDP. The
majority of users are able to login without any issues.



However when some users attempt to login to the server they receive an
xmltooling:XMLParserException error.



The logs showed the following error:



*ERROR XMLTooling.ParserPool [1]: fatal error on line 1, column 1, message:
invalid byte '–' at position 1 of a 1-byte sequence*



A SAML trace provided by the external IDP identified that the problematic
users had a SAML token that contained an endash character ‘–‘ (Unicode Hex
'x96') in one of the attributes of the SAML token.



When the attribute was changed to remove the endash character – the
Shibboleth SP had no problems processing the token.



Is there a configuration to enable the endash character to be correctly
parsed? Or could this be an issue with the XML parser?



Many thanks.



Alvin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161129/245a7d22/attachment-0001.html>