Possible bug with Shib IdP v4.0.0

Ian Young ian at iay.org.uk
Sat Apr 18 07:03:37 EDT 2020


> On 2020-04-18, at 04:49, Mak, Steve <makst at upenn.edu> wrote:
> 
> Are we just doing sp metadata poorly is should I report this as a regression?


A little of column A, a little of column B.

As Rod points out, the Shibboleth code should never be hitting a NullPointerException, so there is a bug in the IdP code here.

However, the metadata that is causing that exception is in error: it's not valid for that element (or in general any SAML element) to have an empty body like that. If you don't have ServiceName, you should omit the element.

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200418/21a22687/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3883 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20200418/21a22687/attachment.p7s>


More information about the users mailing list