help with error processing SAML request to IdP

[IAM David Bantz]

Here's the SAML request as presented in Firefox SAML Tracer:

<samlp:AuthnRequest ID="_1572e46c-3744-4e8d-9969-fe26fccc8ed1"
                    Version="2.0"
                    IssueInstant="2016-09-29T12:36:39.342Z"

Destination="https://idp.alaska.edu/idp/profile/SAML2/Redirect/SSO"
                    ForceAuthn="false"
                    IsPassive="false"

ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

AssertionConsumerServiceURL="https://account-d.docusign.com/organizations/dc41b1e0-5bbd-4859-be88-c28699bc57d2/saml2/login"
                    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                    >
    <saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://account-d.docusign.com/organizations/dc41b1e0-5bbd-4859-be88-c28699bc57d2/saml2</saml:Issuer>
    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
        <SignedInfo>
            <CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
            <SignatureMethod
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
            <Reference URI="#_1572e46c-3744-4e8d-9969-fe26fccc8ed1">
                <Transforms>
                    <Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                    <Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
                        <InclusiveNamespaces PrefixList="#default
samlp saml ds xs xsi"

xmlns="http://www.w3.org/2001/10/xml-exc-c14n#"
                                             />
                    </Transform>
                </Transforms>
                <DigestMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />

<DigestValue>FrP+ZC0imrgSrSK/nzrfoDMbCx6x9TBDOrrvFZXjNh8=</DigestValue>
            </Reference>
        </SignedInfo>
        <SignatureValue>VOmjL1IFmt7jj55GtQ6HKhuzbUFJndCG5rb/+82S7hkb7P4rFbM1rKZ419Kdmf+vF9r6cqW+cqQ4zs63eRMwDkjM+XJ3zr5o56iGUSkyExzTbMgjj07K5DfRqclOpB3w6XjNRP7+Y6dv+cNzCkUZb9cOdVijmshWwBlQfM9/6S3MT4MTibJXbWiWzpjb7zc+tdF6hoczciZq61rit2HTJ4/WLa+tnZ6j6uI1X1X5ZOz4546ltuhmKEqph+yySjun3niw6s/iaUO6pvvhuHXmPUbE83uMmMRxaut9BkZZ/1pE0041p4hKrisCJbUt9Lo4iUmtCvH1BvMx9FHttlM4rA==</SignatureValue>
        <KeyInfo>
            <X509Data>

<X509Certificate>MIIG7zCCBdegAwIBAgIQaxBjH4Cjwrc9HjjjBeW3LjANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDQxNTAwMDAwMFoXDTE5MDQxNjIzNTk1OVowgYcxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRcwFQYDVQQKDA5Eb2N1U2lnbiwgSW5jLjEdMBsGA1UECwwUVGVjaG5pY2FsIE9wZXJhdGlvbnMxGTAXBgNVBAMMEHNzby5kb2N1c2lnbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZJiZtWiWXHSJcWmAzYRw/PKfpbHQniQokolPll51jaWr+9LU6NZ/r/xusfwb2LsJBggh+Dp2o6IA/4fd2DoTeJN4ubzJMoqtIiCeawid2Wg46fCyNwcfKw/ewU9mSY4ZmDt2pkjQseQHVz9XbZogwUNNnxzJ+ALRqVSPQiqzqrwJOWECehCJfj6wLYC8aqyn2ywvlpLSK3Gsd1vym3B+VNbVBjuXsUBQOQNzYXbDRKihKZuBCIzKGEi6a28xj/CTDEvbUd56vjA9fiEUf6hjLm/Iw021b2nYgOPuQ0vuTbNP93ONiVgLrfXuH8jqKTSg/WAVGUtZcWat46Dsx2GVAgMBAAGjggNdMIIDWTAbBgNVHREEFDASghBzc28uZG9jdXNpZ24uY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIB9AYKKwYBBAHWeQIEAgSCAeQEggHgAd4AdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVQbeJIvAAAEAwBHMEUCIQC+PhDx01YTE7+q/kBJm7MtLDw9VajLDPpnQZjJZmk0zwIgaK6X7/nb+LEKFQTJP91mmD8PlAHZb+kqmiXe53AXZlwAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVQbeJJiAAAEAwBHMEUCIBBvAiCHI1BIpyaEZsJg7qIhms7f6pGKY24jT89tDoV8AiEA9Ud3flItCDm2viIeGvbtvfuTzXr50vGK9gf3+Qd3rKcAdQBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVQbeJJHAAAEAwBGMEQCIHsgNRi2OrIb1GDmPFAMgOXcwsOWSy6XRE2INeylW2WFAiAe9Zx1AQ8p4LkOeZSriUVIeiZcn30GIDeKPEpMt6seSAB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABVBt4lCgAAAQDAEYwRAIgW+w2X6PYUXUeABXyC8gMObXCtO+NqCiQyG3GPEd3J7MCIANluYVvuM1XvDEI1iwEzoasvs6SBXtgRxOgDzy0/7T2MA0GCSqGSIb3DQEBCwUAA4IBAQBSAi/C/DqUfb6yRSB2ivc08j/r/+0By5HV76a6Vk37p8x2MAdMT2fpukOY1K8tlCDpk49gTwe+9bCuzFWg87Al0JtsHM9qrnLyaQF8QFqKAWpH0yDePqQQGmxGKS/d04MFIXuUh5QY6d4Hq6RvqR4BsAD+sSDZ+8rJoAsfkp1Y5xpVmJ2tB6NcwhRrsG3cEAzqRX3n69hgLMUdMETzM+zvmOZ/VoC+8Zj+roBtJODdqBRCNU6qnk7/vzADLagiFTc85sLQyk3slx/tFXvD/Vt7HD+oBgqfiLJtyWx8YezffHdkOV86vs6HUUeIBJAWH79o8enVs1bTCaV16wp4RNBA</X509Certificate>
            </X509Data>
        </KeyInfo>
    </Signature>
    <samlp:NameIDPolicy
Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"
                        AllowCreate="true"
                        />
</samlp:AuthnRequest>

and the error in Shib IdP process log:

04:36:39.849 - ERROR
[org.opensaml.ws.message.decoder.BaseMessageDecoder:208] - Encountered
error parsing message into its DOM representation
> org.opensaml.xml.parse.XMLParserException: Unable to read XML from input stream
>
>         at org.opensaml.xml.parse.StaticBasicParserPool.parse(StaticBasicParserPool.java:237) ~[xmltooling-1.4.0.jar:na]
> ...
>
> Caused by: java.util.zip.ZipException: oversubscribed dynamic bit lengths tree
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160929/61ed442a/attachment.html>