[
https://issues.apache.org/jira/browse/VCL-1105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Josh Thompson resolved VCL-1105.
--------------------------------
Resolution: Fixed
> Shibboleth authentication broken due to bug in getCryptKeyID
> ------------------------------------------------------------
>
> Key: VCL-1105
> URL: https://issues.apache.org/jira/browse/VCL-1105
> Project: VCL
> Issue Type: Bug
> Components: web gui (frontend)
> Reporter: Josh Thompson
> Priority: Critical
> Fix For: 2.5.1
>
>
> Shibboleth authentication results in a failed query due to the way the
> cryptkeyid file is located in getCryptKeyID in utils.php. The function ends
> up getting called from vcl/shibauth/index.php. This results in the function
> looking for vcl/shibauth/.ht-inc/cryptkey/cryptkeyid instead of
> vcl/.ht-inc/cryptkey/cryptkeyid. An additional preg_replace should be added
> to strip out /shibauth if it exists in $_SERVER['SCRIPT_FILENAME'].
> function getCryptKeyID() {
> $reg = "|" . SCRIPT . "$|";
> $filebase = preg_replace($reg, '', $_SERVER['SCRIPT_FILENAME']);
> $filebase = preg_replace('|/shibauth|', '', $filebase);
> $filebase .= "/.ht-inc/cryptkey";
> $idfile = "$filebase/cryptkeyid";
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
