Message Security Error

[David E. Newswanger]

I missed your comment about the log, but I don't think that's possible, the browser message is triggered by things that are always logged. Maybe you're not looking in the right one, but I know rejection of unsigned requests should be in there.


I found the log message. I missed it because it was a warning instead of an error. Sorry about that.


We don't support the back-channel (though it's possible that we are accidentally advertising that we do). Would lack of back-channel support be something that could cause this error?


Cheers,

    David Newswanger

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Friday, February 23, 2018 5:09:39 PM
To: Shib Users
Subject: RE: Message Security Error

> > I did some Googling and it sounds like that error can happen when the
> > servers disagree on the time, but we've had that issue before and it
> showed
> > up in the logs. I don't see anything in the logs for this error. Any idea what
> > might be causing this?
>
> Don't Google error messages that are in a browser, check your log.
>
> The logout request isn't signed.

I missed your comment about the log, but I don't think that's possible, the browser message is triggered by things that are always logged. Maybe you're not looking in the right one, but I know rejection of unsigned requests should be in there.

-- Scott

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180226/50f41811/attachment.html>