CAS proxy validation failing

[Andrew Morgan]

On Tue, 5 Mar 2019, Cantor, Scott wrote:

> Ok, this *might* work, big emphasis on might. And it's still not 
> supported, but if you wanted to play...
>
> <bean class="net.shibboleth.utilities.java.support.httpclient.HttpClientBuilder" factory-method="buildClient"
> 	p:httpFollowRedirects="false" />
>
> I think that might get you a more capable bean to configure than the 
> ones we provide in the parent beans, and that class has the property as 
> above, to turn off the setting.
>
> You'd have to transfer over any other settings needed and then wire that 
> into the system file.
>
> One thing it won't do is add the Shibboleth/OpenSAML user agent string 
> to the requests, but that's not terribly crucial obviously.

We decided that modifying Shibboleth to this extent to work around a 
misconfigured CAS client was not worthwhile.  :)

I appreciate all of the help, and I've learned more about Shibboleth, too!

Thanks,
 	Andy