Troubleshooting the "Unable to decode" (IdP 3.3)

[O'Dowd, Josh]

> Is there any kind of reverse proxying here, or HA/LB device in front of the IdP, or something like that?  That's where I would think to look next.

Yes according to our sysadmin we are running requests thru a Kimp Hardware LB to one of two IdP nodes that each have an on-board apache handling SSL.  For the record, I don’t like that setup and I know that you guys recommend no Apache impedance.  Again, the sample request we are currently debugging came from the httpd-access log of one of the IdP node servers.

Josh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170830/0bed1235/attachment.html>