error handling

[Guillaume Rousse]

Hello list.

The current documentation about error handling 
(https://wiki.shibboleth.net/confluence/display/SP3/Errors) mentions 
eight error kinds, each corresponding to an attribute of the Error 
element in configuration, so as to be overrided by a specific template:
- session
- metadata
- ssl
- localLogout
- partialLogout
- globalLogout
- access

This list of error templates (according to their content) found in SP 
3.0.4 release, however, doesn't match the same exact list:
- sessionError.html
- metadataError.html
- sslError.html
- localLogout.html
- globalLogout.html
- partialLogout.html
- attrChecker.html

There is a perfect mapping between template names and error kinds, 
excepted for the last ones: is the 'attrChecker.html' template meant to 
be used in case of error from the 'access' kid, or is it unrelated ? And 
given its content, should we consider the 'access' error kind, 
documented as 'authorization failures', as actually meaning 'missing 
mandatory attribute' ?

Also, the documentation explicitely mention default values for 'session' 
and 'metadata' error kinds, not for others, but also mention:

The filenames of the error templates to use are defaulted based on the 
kind of error, but can be overridden using the <Errors> element as follows.

Does it means than all those error kinds have actual default values, not 
just the two one mentionned, and than this current presentation is 
misleading ?

Thanks.
-- 
Guillaume Rousse
Pôle SSI

Tel: +33 1 53 94 20 45
www.renater.fr

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3637 bytes
Desc: Signature cryptographique S/MIME
URL: <http://shibboleth.net/pipermail/users/attachments/20190822/7bf966f2/attachment.p7s>