opensaml::BindingException at (https://<domain>/Shibboleth.sso/SAML2/POST)
Eric
eric at tmhk.it
Tue Sep 13 21:03:22 EDT 2016
Scott,
I certainly believe the error isn't lying. I just can't find proof of the
malformed request in any logs (browser, apache access logs, etc) if there's
somewhere in shibboleth I should be looking besides transaction logs (after
I fix them) I'd love to know.
As for the logging, I will look around for resources on configuring logging
correctly and see if that can provide me the proof I need to fix the issue.
Of course if you have suggestions for logging configuration I would also
happily take that advice as well.
Thanks again!
Eric
On Sep 13, 2016 8:55 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
> On 9/13/16, 7:01 PM, "users on behalf of Eric" <
> users-bounces at shibboleth.net on behalf of eric at tmhk.it> wrote:
>
> > Now, I can see that my browser is making the POST request, I can see
> that the
> > SAMLResponse is included as a parameter in the request, and I can parse
> out the
> > SAMLResponse value as a valid assertion.
>
> Well, it is what is, the error isn't lying to you. If you trace the
> traffic, I can promise you there's a request to the server *without* a form
> submission/parameter. Whether that's after the one you're talking about or
> whatever, I couldn't say.
>
> > What's interesting is that the shibboleth transaction.log file
> doesn't show a number of
> > logged values that it would normally show
>
> The transaction log is configured with broken, old, default settings that
> don't work when it logs errors. That's all that's happening there, that's
> what an "error" looks like when you don't change the log format.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160913/60a0e4cc/attachment.html>
More information about the users
mailing list