SP 3.1.0 unable to handle empty discoveryURL attribute

[Wessel, Keith]

Thanks, Scott. This configuration that we had was frankly not a clean setup, anyway, and resulted in a warning being written to the log every time the config was parsed. So, it's high time we fixed our template.

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Tuesday, April 14, 2020 1:18 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: SP 3.1.0 unable to handle empty discoveryURL attribute

On 4/14/20, 2:11 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Not sure if this was intended behavior, but our stock shibboleth2.xml for campus used to have discoveryProtocol set to > SAMLDS and discoveryURL set to "". The upgrade to 3.1.0 seems to choak on this.

It's intentional, that kind of thing was allowing crashes in other areas, so the schema was fixed. That is definitely invalid.

> We did this for ease of our SP operators to switch from using a single IdP configuration to using a DS. Of course,we can
> change this, but I saw nothing in the release notes related to this parsing change, and I wondered if it was intended or a
> bug.

I'll add a note about it.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net