CAS Service URL issue?

[Marvin Addison]

On Wed, Jun 7, 2017 at 12:30 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> There are two encoded slashes there. The browser will strip those when it
> actually performs the redirect, so again the problem is with the original
> request.
>

I agree with Scott's analysis. I should note that URL encoding has been a
long-standing point of frustration with CAS integrations.


> There's no fruitful direction to take in the IdP to soften the comparisons


We've softened in one case common to Java applications, namely the
jsessionid path parameter that servlet containers like to inject into URLs.
The IdP can be configured to ignore those.


> though I suppose Marvin could add some kind of plugin interface for that
> if one doesn't already exist.
>

The configuration bean
net.shibboleth.idp.cas.config.impl.ValidateConfiguration takes
Comparator<String>, so it's pretty flexible. You could extend
net.shibboleth.idp.cas.service.impl.DefaultServiceComparator or build your
own depending on your needs.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170608/f72a66c2/attachment.html>