<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 8/30/17 3:19 PM, Brent Putman wrote:<br>
</div>
<blockquote type="cite"
cite="mid:dd269698-4afb-0164-158d-a2903965dec0@georgetown.edu">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<br>
<br>
<br>
<blockquote type="cite"
cite="mid:6C4BCDAB7291C340B9D5C096C70C6C250145BE3E21@UMMAIL02.gs.umt.edu">
<div class="WordSection1">
<div
style="mso-element:para-border-div;border:none;border-bottom:solid
windowtext 1.0pt;padding:0in 0in 1.0pt 0in"> </div>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">The
GET component of HTTPRequest from the httpd-access.log
which caused the above error:</span></p>
</div>
</blockquote>
<br>
I'll spend a few minutes investigating this and let you know what
I find.<br>
</blockquote>
<br>
<br>
That message is DEFLATEd and is a valid Redirect binding message, as
far as I can tell. It isn't merely Base64-encoded like a POST
message would be. It is successfully decoded by the OneLogin tool,
which unlike the FEIDE tool requires it to be DEFLATEd (I tested
with a valid POST binding message, and it fails as expected).<br>
<br>
So I tend to agree with Scott that there may be some miscorrelation
here of the HTTP log and OpenSAML error in the IdP. It also
appears the HTTP log was from a Shib SP, whose Redirect binding impl
is known to work with the Shib IdP, so that's more evidence for that
suspicion.<br>
<br>
Can you please double check the messages you are pulling out of the
HTTP log and make sure you're getting one of them that causes the
error?<br>
<br>
</body>
</html>