Ex: Re: which SP when signature validation fails?

[Paul B. Henson]

On Sun, Jul 09, 2023 at 05:45:41PM -0400, Brent Putman wrote:

> If it's a POST binding inbound to the IdP and therefore an XML
> protocol message signature, we do log this, but on DEBUG. You can get
[...]
> For the archives, if it's Redirect or POST SimpleSign binding, the
> corresponding logging class will be
[...]
> I don't recollect why in the first case it's DEBUG and in the latter
> case it's WARN.  There might have been a reason that "made sense" at

Ah hah, you know, I had a vague feeling in the back of my mind that this
had happened before and I didn't have a problem figuring out which SP it
was for.

> it out.  If we were going to change something, we'd probably bump
> failures in the first case up to WARN.

Thanks for the clarification; as a reward for your good deed here is an
issue to remind you to think about making them the same ;)...

	https://shibboleth.atlassian.net/browse/OSJ-383

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768