Shibboleth SSO server adds "=" after query string

[Virajitha Sarma]

​Hi

Apologies for the mistake in the example quoted here.

To be precise, the exact error reported by the cas server:
Validation response: <?xml version="1.0"?>\n<cas:serviceResponse xmlns:cas="
http://www.yale.edu/tp/cas">\n<cas:authenticationFailure
code="INVALID_SERVICE">Mismatching service parameters: expected '
https://library.example.edu/patroninfo~S7?/0/redirect=https://library.example.edu:443/search~S7?/pblackwell/pblackwell/1,1,2,B/l962~1070705&FF=pblackwell+pamela&1,,2,0,0'
but was: '
https://library.example.edu/patroninfo~S7?%2F0%2Fredirect=https%3A%2F%2Flibrary
.example
.edu%3A443%2Fsearch%7ES7%3F%2Fpblackwell%2Fpblackwell%2F1%2C1%2C2%2CB%2Fl962%7E1070705&FF=pblackwell+pamela&1%2C%2C2%2C0%2C0
*=*'</cas:authenticationFailure>\n</cas:serviceResponse>

The additional = highlighted here is causing the error.


​

On Mon, Jan 8, 2018 at 2:39 PM, Tobias Galéus <tobias.galeus at gu.se> wrote:

> virajitha wrote
> >>> Error thrown by CAS server :
> >>> response = <?xml version="1.0"?>\n
> > <cas:serviceResponse xmlns:cas="
> >>
> >> http://www.yale.edu/tp/cas">\n
> > <cas:authenticationFailure
> >>
> >> code="INVALID_SERVICE">Mismatching service parameters: expected '
> >>> https://cas.example.com/library?redirect=https://cas.example.com:443/
> >>> library?/pblackwell/pblackwell/1,1,2,B/l962~107070
> >>> 5&FF=pblackwell+pamela&1,,2,0,0' but was: 'https://cas.
> >>> example.com:443/library?%2F0%2Fredirect=https%3A%2F%2Fcas.example.com
> >>> :443/library%3F%2Fpblackwell%2Fpblackwell%2F1%2C1%2C2%2CB%2Fl962%
> >>> 7E1070705&FF=pblackwell+pamela&1%2C%2C2%2C0%2C0='<
> >>> /cas:authenticationFailure>\n
> > </cas:serviceResponse>
> > ,
>
> Expected:
> https://cas.example.com/library?redirect=https://cas.
> example.com:443/library?/pblackwell/pblackwell/1,1,2,B/
> l962~1070705&FF=pblackwell+pamela&1,,2,0,0
> but was (urldecoded):
> https://cas.example.com:443/library?/0/redirect=https://
> cas.example.com:443/library?/pblackwell/pblackwell/1,1,2,B/
> l962~1070705&FF=pblackwell
> pamela&1,,2,0,0=
>
> Notice the added portnumber ":443" and the zero "/0/". Something is
> changing
> your URL and I do not think it's Shibboleth.
>
>
>
> --
> Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-
> f1660767.html
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 

Regards,
Virajitha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180108/b9470824/attachment-0001.html>