Message Security Error

[David E. Newswanger]

Thanks for all the help. I really appreciate it. We'll get in touch with the application maintainer and see if they can fix the problem.


Cheers,

    David Newswanger


Berea College Computer Science Class of 18

Senior Web and Database Analyst

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, February 26, 2018 4:58:01 PM
To: Shib Users
Subject: RE: Message Security Error

> I found the log message. I missed it because it was a warning instead of an
> error. Sorry about that.

We tend to reserve "error" for something actually wrong with the system and "warn" for runtime conditions that are potentially concerning but ultimately either specific to another malfunctioning system or are unavoidable.

> We don't support the back-channel (though it's possible that we are
> accidentally advertising that we do). Would lack of back-channel support be
> something that could cause this error?

No, if the error is what I said it was, the error isn't yours. Logout messages are required to be signed. If you want to turn that off you can, there's a property for it. That is not SAML-compliant, so it's not the default.

-- Scott

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180226/c0e20f77/attachment.html>