<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<div class="__TEE_Quote__" style="border-color: rgb(200, 200, 200); border-left: 3px solid rgb(200, 200, 200); padding-left: 10px; color: rgb(102, 102, 102); font-size: 17px;">
I missed your comment about the log, but I don't think that's possible, the browser message is triggered by things that are always logged. Maybe you're not looking in the right one, but I know rejection of unsigned requests should be in there.<br>
</div>
<br>
<p style="margin-top:0;margin-bottom:0">I found the log message. I missed it because it was a warning instead of an error. Sorry about that.<br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><span>We don't support the back-channel (though it's possible that we are accidentally advertising that we do). Would lack of back-channel support be something that could cause this error?</span><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p>Cheers,<br>
</p>
<p> David Newswanger</p>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott <cantor.2@osu.edu><br>
<b>Sent:</b> Friday, February 23, 2018 5:09:39 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> RE: Message Security Error</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">> > I did some Googling and it sounds like that error can happen when the<br>
> > servers disagree on the time, but we've had that issue before and it<br>
> showed<br>
> > up in the logs. I don't see anything in the logs for this error. Any idea what<br>
> > might be causing this?<br>
> <br>
> Don't Google error messages that are in a browser, check your log.<br>
> <br>
> The logout request isn't signed.<br>
<br>
I missed your comment about the log, but I don't think that's possible, the browser message is triggered by things that are always logged. Maybe you're not looking in the right one, but I know rejection of unsigned requests should be in there.<br>
<br>
-- Scott<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>