Shib idp v3.3.3 with CAS plugin warning

Pablo Vidaurri psvidaurri at gmail.com
Mon Aug 27 23:26:46 EDT 2018


Unexpected behavior .... when a user logs in via idp using cas plugin, they
get into the sp fine. But if they click on back space they get taken to a
github page:
https://github.com/Unicon/shib-cas-authn3/blob/3.2.3/IDP_HOME/edit-webapp/no-conversation-state.jsp

As if that is not bad enough, the URL has our domain in it but it obviously
is not us that his hosting this git repository.

If you installed the cas plugin, you probably have
$IDP_HOME/edit-webapp/no-conversation-state.jsp
that has bad code in it. You probably do not want this.

-spv
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180827/e63ea967/attachment.html>


More information about the users mailing list