<div dir="ltr"><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif">Hi</div><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif"><br></div><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif">Apologies for the mistake in the example quoted here.</div><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif"><br></div><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif">To be precise, the exact error reported by the cas server:</div><div class="gmail_default"><font face="trebuchet ms, sans-serif">Validation response: <?xml version="1.0"?>\n<cas:serviceResponse xmlns:cas="<a href="http://www.yale.edu/tp/cas">http://www.yale.edu/tp/cas</a>">\n<cas:authenticationFailure code="INVALID_SERVICE">Mismatching service parameters: expected '<a href="https://library.example.edu/patroninfo~S7?/0/redirect=https://library.example.edu:443/search~S7?/pblackwell/pblackwell/1,1,2,B/l962~1070705&FF=pblackwell+pamela&1,,2,0,0">https://library.example.edu/patroninfo~S7?/0/redirect=https://library.example.edu:443/search~S7?/pblackwell/pblackwell/1,1,2,B/l962~1070705&FF=pblackwell+pamela&1,,2,0,0</a>' but was: '<a href="https://library.example.edu/patroninfo~S7?%2F0%2Fredirect=https%3A%2F%2Flibrary">https://library.example.edu/patroninfo~S7?%2F0%2Fredirect=https%3A%2F%2Flibrary</a>.</font><span style="font-family:"trebuchet ms",sans-serif">example</span><font face="trebuchet ms, sans-serif">.edu%3A443%2Fsearch%7ES7%3F%2Fpblackwell%2Fpblackwell%2F1%2C1%2C2%2CB%2Fl962%7E1070705&FF=pblackwell+pamela&1%2C%2C2%2C0%2C0<b><font color="#351c75" style="background-color:rgb(230,145,56)">=</font></b>'</cas:authenticationFailure>\n</cas:serviceResponse></font><br></div><div class="gmail_default"><font face="trebuchet ms, sans-serif"><br></font></div><div class="gmail_default"><font face="trebuchet ms, sans-serif">The additional = highlighted here is causing the error.</font></div><div class="gmail_default"><br></div><div class="gmail_default"><font face="trebuchet ms, sans-serif"><br></font></div><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif"></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 8, 2018 at 2:39 PM, Tobias Galéus <span dir="ltr"><<a href="mailto:tobias.galeus@gu.se" target="_blank">tobias.galeus@gu.se</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">virajitha wrote<br>
>>> Error thrown by CAS server :<br>
>>> response = <?xml version="1.0"?>\n<br>
> <cas:serviceResponse xmlns:cas="<br>
>><br>
>> <a href="http://www.yale.edu/tp/cas" rel="noreferrer" target="_blank">http://www.yale.edu/tp/cas</a>">\n<br>
> <cas:authenticationFailure<br>
>><br>
>> code="INVALID_SERVICE"><wbr>Mismatching service parameters: expected '<br>
>>> <a href="https://cas.example.com/library?redirect=https://cas.example.com:443/" rel="noreferrer" target="_blank">https://cas.example.com/<wbr>library?redirect=https://cas.<wbr>example.com:443/</a><br>
>>> library?/pblackwell/<wbr>pblackwell/1,1,2,B/l962~107070<br>
>>> 5&FF=pblackwell+pamela&<wbr>amp;1,,2,0,0' but was: '<a href="https://cas" rel="noreferrer" target="_blank">https://cas</a>.<br>
>>> <a href="http://example.com:443/library?%2F0%2Fredirect=https%3A%2F%2Fcas.example.com" rel="noreferrer" target="_blank">example.com:443/library?%2F0%<wbr>2Fredirect=https%3A%2F%2Fcas.<wbr>example.com</a><br>
>>> :443/library%3F%2Fpblackwell%<wbr>2Fpblackwell%2F1%2C1%2C2%2CB%<wbr>2Fl962%<br>
>>> 7E1070705&FF=pblackwell+<wbr>pamela&1%2C%2C2%2C0%2C0='<<br>
>>> /cas:authenticationFailure>\n<br>
> </cas:serviceResponse><br>
> ,<br>
<br>
Expected:<br>
<a href="https://cas.example.com/library?redirect=https://cas.example.com:443/library?/pblackwell/pblackwell/1,1,2,B/l962~1070705&FF=pblackwell+pamela&1,,2,0,0" rel="noreferrer" target="_blank">https://cas.example.com/<wbr>library?redirect=https://cas.<wbr>example.com:443/library?/<wbr>pblackwell/pblackwell/1,1,2,B/<wbr>l962~1070705&FF=<wbr>pblackwell+pamela&1,,2,0,0</a><br>
but was (urldecoded):<br>
<a href="https://cas.example.com:443/library?/0/redirect=https://cas.example.com:443/library?/pblackwell/pblackwell/1,1,2,B/l962~1070705&FF=pblackwell
pamela&1,,2,0,0=" rel="noreferrer" target="_blank">https://cas.example.com:443/<wbr>library?/0/redirect=https://<wbr>cas.example.com:443/library?/<wbr>pblackwell/pblackwell/1,1,2,B/<wbr>l962~1070705&FF=pblackwell<br>
pamela&1,,2,0,0=</a><br>
<br>
Notice the added portnumber ":443" and the zero "/0/". Something is changing<br>
your URL and I do not think it's Shibboleth.<br>
<br>
<br>
<br>
--<br>
Sent from: <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html" rel="noreferrer" target="_blank">http://shibboleth.1660669.n2.<wbr>nabble.com/Shibboleth-Users-<wbr>f1660767.html</a><br>
<span class="HOEnZb"><font color="#888888">--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><br></div><div>Regards,</div><div>Virajitha</div></div></div>
</div>