Shib idp v3.3.3 with CAS plugin warning

[John Gasper]

Pablo,

As Scott mentioned, please open a ticket https://github.com/Unicon/shib-cas-authn3. And please try to include more details than you did here, a .har file would be ideal. This sounds more like a local deployment issue than a plugin issue/bug with the jsp file.

Thanks,
John


John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef



    
    Date: Mon, 27 Aug 2018 22:26:46 -0500
    From: Pablo Vidaurri <psvidaurri at gmail.com>
    To: users at shibboleth.net
    Subject: Shib idp v3.3.3 with CAS plugin warning
    Message-ID:
    	<CAOe-DO9pxCrY-uWs9WuV=SmAgA9-nxV4hgjtybBoiMYVf6G0zQ at mail.gmail.com>
    Content-Type: text/plain; charset="utf-8"
    
    Unexpected behavior .... when a user logs in via idp using cas plugin, they
    get into the sp fine. But if they click on back space they get taken to a
    github page:
    https://github.com/Unicon/shib-cas-authn3/blob/3.2.3/IDP_HOME/edit-webapp/no-conversation-state.jsp
    
    As if that is not bad enough, the URL has our domain in it but it obviously
    is not us that his hosting this git repository.
    
    If you installed the cas plugin, you probably have
    $IDP_HOME/edit-webapp/no-conversation-state.jsp
    that has bad code in it. You probably do not want this.
    
    -spv
    -------------- next part --------------
    An HTML attachment was scrubbed...
    URL: <http://shibboleth.net/pipermail/users/attachments/20180827/e63ea967/attachment-0001.html>