search

painless-security / trust-router

Moonshot Trust Router
0 stars 0 forks source link

TIDS error on req with only domain constraint or only realm constraint #18

Open jennifer-richards opened 6 years ago

jennifer-richards commented 6 years ago

The TID server (tids) returns an error with message "internal processing error" when handling a request that has only domain constraints or only realm constraints. An otherwise identical request that has both domain and realm constraints, or that has neither, will be handled correctly.

To reproduce: configure a trust router to have an RP realm with a tid_incoming filter with both realm and domain constraints. Issue a TID request with tidc and verify that it succeeds. Reconfigure the trust router without one or the other and the request should fail. Remove both and it should succeed.

Launchpad Details: #LP1703943 Jennifer Richards - 2017-07-12 17:43:18 +0000

jennifer-richards commented 6 years ago

As a workaround, configure a wildcard constraint ("*") if only one constraint is needed.

Launchpad Details: #LPC Jennifer Richards - 2017-07-12 17:46:55 +0000