[
https://issues.apache.org/jira/browse/VCL-1105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16717852#comment-16717852
]
ASF subversion and git services commented on VCL-1105:
------------------------------------------------------
Commit c92ffda6ca794892e65e8afdf06f8d9039c81e52 in vcl's branch
refs/heads/develop from [~jfthomps]
[ https://git-wip-us.apache.org/repos/asf?p=vcl.git;h=c92ffda ]
VCL-1105 - Shibboleth authentication broken due to bug in getCryptKeyID
utils.php: modified getCryptKeyID: added preg_replace to remove /shibauth from
$filebase
> Shibboleth authentication broken due to bug in getCryptKeyID
> ------------------------------------------------------------
>
> Key: VCL-1105
> URL: https://issues.apache.org/jira/browse/VCL-1105
> Project: VCL
> Issue Type: Bug
> Components: web gui (frontend)
> Reporter: Josh Thompson
> Priority: Critical
> Fix For: 2.5.1
>
>
> Shibboleth authentication results in a failed query due to the way the
> cryptkeyid file is located in getCryptKeyID in utils.php. The function ends
> up getting called from vcl/shibauth/index.php. This results in the function
> looking for vcl/shibauth/.ht-inc/cryptkey/cryptkeyid instead of
> vcl/.ht-inc/cryptkey/cryptkeyid. An additional preg_replace should be added
> to strip out /shibauth if it exists in $_SERVER['SCRIPT_FILENAME'].
> function getCryptKeyID() {
> $reg = "|" . SCRIPT . "$|";
> $filebase = preg_replace($reg, '', $_SERVER['SCRIPT_FILENAME']);
> $filebase = preg_replace('|/shibauth|', '', $filebase);
> $filebase .= "/.ht-inc/cryptkey";
> $idfile = "$filebase/cryptkeyid";
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
