Josh Thompson created VCL-1105:
----------------------------------
Summary: Shibboleth authentication broken due to bug in
getCryptKeyID
Key: VCL-1105
URL: https://issues.apache.org/jira/browse/VCL-1105
Project: VCL
Issue Type: Improvement
Components: web gui (frontend)
Reporter: Josh Thompson
Fix For: 2.5.1
Shibboleth authentication results in a failed query due to the way the
cryptkeyid file is located in getCryptKeyID in utils.php. The function ends up
getting called from vcl/shibauth/index.php. This results in the function
looking for vcl/shibauth/.ht-inc/cryptkey/cryptkeyid instead of
vcl/.ht-inc/cryptkey/cryptkeyid. An additional preg_replace should be added to
strip out /shibauth if it exists in $_SERVER['SCRIPT_FILENAME'].
function getCryptKeyID() {
$reg = "|" . SCRIPT . "$|";
$filebase = preg_replace($reg, '', $_SERVER['SCRIPT_FILENAME']);
$filebase = preg_replace('|/shibauth|', '', $filebase);
$filebase .= "/.ht-inc/cryptkey";
$idfile = "$filebase/cryptkeyid";
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
