SP 3.1.0 unable to handle empty discoveryURL attribute

Cantor, Scott cantor.2 at osu.edu
Tue Apr 14 14:18:03 EDT 2020


On 4/14/20, 2:11 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Not sure if this was intended behavior, but our stock shibboleth2.xml for campus used to have discoveryProtocol set to > SAMLDS and discoveryURL set to "". The upgrade to 3.1.0 seems to choak on this.

It's intentional, that kind of thing was allowing crashes in other areas, so the schema was fixed. That is definitely invalid.

> We did this for ease of our SP operators to switch from using a single IdP configuration to using a DS. Of course,we can
> change this, but I saw nothing in the release notes related to this parsing change, and I wondered if it was intended or a
> bug.

I'll add a note about it.

-- Scott




More information about the users mailing list