mod_shib chokes UTF8 character

[Peter Schober]

* Luo, Pan <pan.luo at ubc.ca> [2021-06-26 02:39]:
> We have a user whose name includes an UTF8 character (O’Brien). The
> character "’" chokes mod_shib when parsing the attribute.

It's not that general of a problem -- if the SP wouldn't support UTF-8
(which is also what the standard mandates, IIRC) I guess we would have
noticed decades ago. ;)
FWIW, I have not had any such problems including when testing with
names like "ρεťẹя ŜçҺởьəŗ" (generated by Dick Visser's great -- but
now seemingly defunct -- "UTF-8 Generator"[1]). The SP processes these
just fine.

"We have a user" suggests you also control the IDP -- what's the IDP
implementaction? Can you turn up the SP's logging to include the
decrypted SAML assertion? Can you disable encryption for this SP at
the IDP and check the SAML during transit in the browser (using
SAMLTracer)? Does the problem occur at all your SPs or only this one?

-peter

[1] https://www.tienhuis.nl/utf8-generator