Hi Alex:
I was encoding the URL part, but not the XML copy of the
RelayState. This fixed the issue.
Thanks,
Carlos
On Feb 18, 2:44 pm, Cuso <[EMAIL PROTECTED]> wrote:
> Hi Alex:
>
> On Feb 10, 1:02 pm, "Alex (Google)" <[EMAIL PROTECTED]> wrote:
>
> > Oops that should be
>
> > ' -> '
>
> > -alex
>
> > On Feb 10, 9:01 am, "Alex (Google)" <[EMAIL PROTECTED]> wrote:
>
> > > HI,
>
> > > Can you try XML encoding the special characters the RelayState value?
> > > i.e.
>
> > > & -> &
> > > " -> "
> > > ' -> &
> > > < -> <
>
> > > > -> >
>
> > > In the RelayState, IE interprets "<mpl" as "<mpl", but if you encode
> > > it as "&ltmpl" it doesn't munge it.
>
> > > (If you search for "internet explorer" in this group you'll see
> > > reports of similar issues.)
>
> > > -alex
>
> > > On Feb 10, 8:05 am, Cuso <[EMAIL PROTECTED]> wrote:
>
> > > > Hello:
>
> > > > Here are the two http conversations I've gathered between our SSO site
> > > > and Google using MSIE and Firefox. When we use Firefox we get the
> > > > start page without problems, but when we use MSIE we get a "Server
> > > > Error" page; you know, the one which says: "We are unable to process
> > > > your request at this time, please try again later.". We get the
> > > > problem every time we try, and we've been trying it for a couple of
> > > > weeks now with no change. I can also provide wireshark network packet
> > > > traces if that would help.
>
> > > > I cannot point out any significant differences between the
> > > > conversations. Please, we need help with this, since our SSO site has
> > > > been down now for more than two weeks.
>
> > > > MSIE Conversation:
>
> > > > .shttps://gaemail.upr.edu/GAESSOWS/identity_provider.jsp?
> > > > SAMLRequest=fZJPb9swDMXvA%2FodBN39L1uBQohdZC2KBmg3o3F32E2RaYeNLGmiFG
> > > > %2Fffo7ToN1hvVLke79HcXn9e9DsAJ7QmpIXac4ZGGVbNH3Jn5u75IpfVxefliQH7cQqhp15gl8RKLBp0pCYH0oevRFWEpIwcgASQYnN6vFBLNJcOG
> > > > %2BDVVZztr4t
> > > > %2BYsyxnb91jmLPQ4o93vAl073atd2Gve7rWkdOuTsxxlrccRaE0VYGwrShKmU51dJvkiKvCm
> > > > %2BiGIhPl%2F%2B5Kx
> > > > %2BdfqK5pTgI6ztqYnEfdPUSf1908wCB2zBf5u6S95b22tIlR04WxGBDxPOjTUUB
> > > > %2FAb8AdU8Pz0UPJdCI5Elo3jmL4NZTIbKY3ODym0MZOKjilqSYSHST34CLyaNyvmcP7dSj9Gl2cYXr3ZLbN3UtXrjx2DrG9rq1H9YSut7XjjQYazPbuzfpDh
> > > > %2F25FWswVbJNubhXRkAOFHULLWVadXP89jelg%2FgI%3D&RelayState=https%3A%2F
> > > > %2Fwww.google.com%2Fa%2Fws.uprm.edu%2FServiceLogin%3Fservice%3Dig
> > > > %26passive%3Dtrue%26continue%3Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%252Fdefault%252Fpostlogin
> > > > %253Fpid%253Dws.uprm.edu%2526url%253Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%26followup%3Dhttp%253A%252F
> > > > %252Fpartnerpage.google.co
> > > > m%252Fws.uprm.edu%252Fdefault%252Fpostlogin%253Fpid%253Dws.uprm.edu
> > > > %2526url%253Dhttp%253A%252F%252Fpartnerpage.google.com%252Fws.uprm.edu
> > > > %26cd%3DUS%26hl%3Den%26nui%3D1%26ltmpl%3Ddefault%26go%3Dtrue
> > > > %26passgzip, deflate....EMozilla/4.0 (compatible; MSIE 6.0; Windows NT
> > > > 5.1; .NET CLR 1.1.4322).....gaemail.upr.edu.....1225....
> > > > Cache-Control...no-
> > > > cache....6JSESSIONID=3D10C181CE0CB220F163832AF6E550F2.workerWeb3...
> > > > workerWeb3..
> > > > .4....SAMLRequest=fZJPb9swDMXvA
> > > > %2FodBN39L1uBQohdZC2KBmg3o3F32E2RaYeNLGmiFG
> > > > %2Fffo7ToN1hvVLke79HcXn9e9DsAJ7QmpIXac4ZGGVbNH3Jn5u75IpfVxefliQH7cQqhp15gl8RKLBp0pCYH0oevRFWEpIwcgASQYnN6vFBLNJcOG
> > > > %2BDVVZztr4t
> > > > %2BYsyxnb91jmLPQ4o93vAl073atd2Gve7rWkdOuTsxxlrccRaE0VYGwrShKmU51dJvkiKvCm
> > > > %2BiGIhPl%2F%2B5Kx
> > > > %2BdfqK5pTgI6ztqYnEfdPUSf1908wCB2zBf5u6S95b22tIlR04WxGBDxPOjTUUB
> > > > %2FAb8AdU8Pz0UPJdCI5Elo3jmL4NZTIbKY3ODym0MZOKjilqSYSHST34CLyaNyvmcP7dSj9Gl2cYXr3ZLbN3UtXrjx2DrG9rq1H9YSut7XjjQYazPbuzfpDh
> > > > %2F25FWswVbJNubhXRkAOFHULLWVadXP89jelg%2FgI%3D&RelayState=https%3A%2F
> > > > %2Fwww.google.com%2Fa%2Fws.uprm.edu%2FServiceLogin%3Fservice%3Dig
> > > > %26passive%3Dtrue%26continue%3Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%252Fdefault%252Fpostlogin
> > > > %253Fpid%253Dws.uprm.edu%2526url%253Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%26followup%3Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%252Fdefault%252Fpostlogin
> > > > %253Fpid%253Dws.uprm.edu%2526url%253Dhttp%253A%252F
> > > > %252Fpartnerpage.google.com%252Fws.uprm.edu%26cd%3DUS%26hl
> > > > %3Den%26nui%3D1%26ltmpl%3Ddefault%26go%3Dtrue%26passive_sso
> > > > %3Dtrue&returnPage=identity_provider.jsp&samlAction=Generate+SAML
> > > > +Response&username=usuariodeprueba&password=password&samlButton=Someter
> > > > +Credenciales
> > > > AB.K.....OK.....Content-Type...text/html;charset=UTF-8...Content-
> > > > Length...4816.
> > > > AB.....<!--
> > > > Copyright (C) 2006 Google Inc.
>
> > > > Licensed under the Apache License, Version 2.0 (the "License");
> > > > you may not use this file except in compliance with the License.
> > > > You may obtain a copy of the License at
>
> > > > http://www.apache.org/licenses/LICENSE-2.0
>
> > > > Unless required by applicable law or agreed to in writing,
> > > > software
> > > > distributed under the License is distributed on an "AS IS" BASIS,
> > > > WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
> > > > implied.
> > > > See the License for the specific language governing permissions
> > > > and
> > > > limitations under the License.
> > > > -->
>
> > > > <html>
> > > > <head>
> > > > <meta http-equiv="Content-Type" content="text/html;
> > > > charset=iso-8859-1">
> > > > <title>Portal de Servicios Electrónicos - Universidad de Puerto
> > > > Rico</title>
> > > > <meta content="noindex,nofollow" name="robots">
> > > > <style type="text/css"><!--
> > > > body {background-color: #ffffff}
> > > > body,td,div,p,a,font,span {font-family: arial,sans-serif}
> > > > body {margin-top:2}
>
> > > > .c {width: 4; height: 4}
>
> > > > .bubble {background-color:#C3D9FF}
>
> > > > .tl {padding: 0; width: 4; text-align: left; vertical-align: top}
> > > > .tr {padding: 0; width: 4; text-align: right; vertical-align: top}
> > > > .bl {padding: 0; width: 4; text-align: left; vertical-align: bottom}
> > > > .br {padding: 0; width: 4; text-align: right; vertical-align: bottom}
>
> > > > .x {background-color: #ddf8cc; border: solid 1px #80c65a; padding:
> > > > 15px; margin: 0 15px 0 0; text-align: center;}
> > > > .x, .x td {font-size: 80%}
> > > > .x table {margin: 0px; text-align: left;}
> > > > .x p {text-align: left;}
> > > > .x h2 {margin:0 0 0 0;font-weight: bold; font-size: 120%;}
>
> > > > .errormsg {color: #cc0000}
> > > > --> </style> </head>
>
> > > > <body onload="document.acsForm.submit();">
>
> > > > <form name="acsForm" action="https://www.google.com/a/ws.uprm.edu/
> > > > acs" method="post" > <!-- target="_blank"> -->
> > > > <div style="display: none">
> > > > <textarea rows=10 cols=80 name="SAMLResponse"><?xml
> > > > version="1.0" encoding="UTF-8"?>
> > > > <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> > > > xmlns="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xenc=
> > > > "http://www.w3.org/2001/04/xmlenc#";
> > > > ID="ilcglaeojeldecjngebelpgjcoilpfonecpmbhgo"
> > > > IssueInstant="2008-02-10T10:13:24Z" Version="2.0">.<Signature
> > > > xmlns="http://www.w3.org/2000/09/
> > > > xmldsig#"><SignedInfo><CanonicalizationMethod
> > > > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments";
> > > > /><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-
>
> > > > sha1" /><Reference URI=""><Transforms><Transform
> > > > Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"; /></
> > > > Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/
> > > > xmldsig#sha1" /><DigestValue>8Q+EfCZdUe5ILP3drpl9wbzShHg=</
> > > > DigestValue></Reference></
> > > > SignedInfo><SignatureValue>nQCRIWXqlWQvziMU33jO
> > > > +AxxhaYRr31qwXPWLOFxpkzGxtEkSK6YWg==</
> > > > SignatureValue><KeyInfo><KeyValue><DSAKeyValue><P>r5Swl0VTgqkZSKUQoeILhNyEZs9Ot8hQgiNuJeI6cFro
> > > > +5/jBP8KDCByq5MkIzqZZxqGZPKc1GZC
> > > > 9QTxM
> > > > qPYOXiShREalv45a4kb6sRGTluh8YpSfskPRMWT77yp7KqGKZbSqHlw
> > > > +FKXraAgzjV7RXCn
> > > > OU14Uun5Ac9R7QSPIls=</P><Q>p3nhx7XegMkLDaySZ3VhakAsEqk=</
> > > > Q><G>QFJ1EaupSqYDMPz4vzknUFZziiYGGZN7+R2ZqTsooVmNxVf+A39v
> > > > +8aFnh6Ny6w9rveOSXjYYAAL
> > > > oejZTqDCPRtnHnW7g4Rp2DktGA47T8ou/
> > > > LOt7MOhtFJSjYUrejxaQLFK35A35sv9pbjF5tCWICe8
> > > > rgawabXh6AvzvOa4/Z8=</G><Y>UTQsust9OOU26ypSLU9/
> > > > sljpyZ9IBrJXVrfgfDMICpxf4hAFVt5CswvJ/CBgy91YjhXMOCdcveJ2
> > > > D2NnevIBRxlU6zLwQB035ec0M2Ctnm9llyVK7Gea3KdYwtgfLyMVFMwXIg6fxjAoimUA4OlOfFpY
> > > > 65fD6fbwPtGoN0pTeYw=</Y></DSAKeyValue></KeyValue></KeyInfo></
> > > > Signature><samlp:Status>..<samlp:StatusCode
> > > > Value="urn:oasis:names:tc:SAML:2.0:status:Success" />.</
> > > > samlp:Status>.<Assertion ID="pijheengoinjgjoljpfigngnhbhnejomholckgdl"
> > > > IssueInstant="2003-04-17T00:46:02Z"
> > > > Version="2.0">..<Issuer>https://www.opensaml.org/IDP..</Issuer>..<Subject>...<NameID
> > > > Format="urn:oasis:names:tc:SAML:2.0:nameid-
> > > > format:emailAddress">....usuariodeprueba...</
> > > > NameID>...<SubjectConfirmation Method="urn:oasis:names:tc:SAML:
> > > > 2.0:cm:bearer" />..</Subject>..<Conditions Not
> > > > Before="2003-04-17T00:46:02Z" NotOnOrAfter="2008-04-17T00:51:02Z">..</
> > > > Conditions>..<AuthnStatement
> > > > AuthnInstant="2008-02-10T10:13:24Z">...<AuthnContext>....<AuthnContextClassRef>.....urn:oasis:names:tc:SAML:
> > > > 2.0:ac:classes:Password....</AuthnContextClassRef>...</
> > > > AuthnContext>..</AuthnStatement>.</Assertion></samlp:Response>
> > > > </textarea>
> > > > <textarea rows=10 cols=80
> > > > name="RelayState">https://www.google.com/a/ws.
> > > > uprm.edu/ServiceLogin?service=ig&passive=true&continue=http%3A%2F
> > > > %2Fpartnerpage.google.com%2Fws.uprm.edu%2Fdefault%2Fpostlogin%3Fpid
> > > > %3Dws.uprm.edu%26url%3Dhttp%3A%2F%2Fpartnerpage.google.com
> > > > %2Fws.uprm.edu&followup=http%3A%2F%2Fpartnerpage.google.com
> > > > %2Fws.uprm.edu%2Fdefault%2Fpostlogin%3Fpid%3Dws.uprm.edu%26url%3Dhttp
> > > > %3A%2F%2Fpartnerpage.google.com
> > > > %2Fws.uprm.edu&cd=US&hl=en&nui=1<mpl=default&go=true&passive_sso=true</
>
> ...
>
> read more ยป
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Google Apps APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/google-apps-apis?hl=en
-~----------~----~----~----~------~----~------~--~---
