[ 
https://issues.apache.org/jira/browse/VCL-1105?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Josh Thompson resolved VCL-1105.
--------------------------------
    Resolution: Fixed

> Shibboleth authentication broken due to bug in getCryptKeyID
> ------------------------------------------------------------
>
>                 Key: VCL-1105
>                 URL: https://issues.apache.org/jira/browse/VCL-1105
>             Project: VCL
>          Issue Type: Bug
>          Components: web gui (frontend)
>            Reporter: Josh Thompson
>            Priority: Critical
>             Fix For: 2.5.1
>
>
> Shibboleth authentication results in a failed query due to the way the 
> cryptkeyid file is located in getCryptKeyID in utils.php.  The function ends 
> up getting called from vcl/shibauth/index.php.  This results in the function 
> looking for vcl/shibauth/.ht-inc/cryptkey/cryptkeyid instead of 
> vcl/.ht-inc/cryptkey/cryptkeyid.  An additional preg_replace should be added 
> to strip out /shibauth if it exists in $_SERVER['SCRIPT_FILENAME'].
> function getCryptKeyID() {
>     $reg = "|" . SCRIPT . "$|";
>     $filebase = preg_replace($reg, '', $_SERVER['SCRIPT_FILENAME']);
>     $filebase = preg_replace('|/shibauth|', '', $filebase);
>     $filebase .= "/.ht-inc/cryptkey";
>     $idfile = "$filebase/cryptkeyid";



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to