You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@vcl.apache.org by "Josh Thompson (JIRA)" <ji...@apache.org> on 2018/10/17 17:43:00 UTC

[jira] [Created] (VCL-1105) Shibboleth authentication broken due to bug in getCryptKeyID

Josh Thompson created VCL-1105:
----------------------------------

             Summary: Shibboleth authentication broken due to bug in getCryptKeyID
                 Key: VCL-1105
                 URL: https://issues.apache.org/jira/browse/VCL-1105
             Project: VCL
          Issue Type: Improvement
          Components: web gui (frontend)
            Reporter: Josh Thompson
             Fix For: 2.5.1


Shibboleth authentication results in a failed query due to the way the cryptkeyid file is located in getCryptKeyID in utils.php.  The function ends up getting called from vcl/shibauth/index.php.  This results in the function looking for vcl/shibauth/.ht-inc/cryptkey/cryptkeyid instead of vcl/.ht-inc/cryptkey/cryptkeyid.  An additional preg_replace should be added to strip out /shibauth if it exists in $_SERVER['SCRIPT_FILENAME'].

function getCryptKeyID() {
    $reg = "|" . SCRIPT . "$|";
    $filebase = preg_replace($reg, '', $_SERVER['SCRIPT_FILENAME']);
    $filebase = preg_replace('|/shibauth|', '', $filebase);
    $filebase .= "/.ht-inc/cryptkey";
    $idfile = "$filebase/cryptkeyid";



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)