Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-34482

shibboleth logout handler is broken in several ways

    XMLWordPrintable

Details

    • MOODLE_23_STABLE, MOODLE_27_STABLE, MOODLE_28_STABLE

    Description

      While testing

      https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPNotify and in particular
      https://wiki.shibboleth.net/confluence/display/SHIB2/SLOWebappAdaptation

      I noticed I was consistently getting 404 errors from the Soap exchange on the shibboleth side. As far as I can read the code, there are multiple problems with the code:

      a) line 34: the use of HTTP_RAW_POST_DATA most probably needs always_populate_raw_post_data in php.ini . And using HTTP_RAW_POST_DATA is deprecated in favour of using php://input
      b) from line 168: the database session handling has to get rewritten (there's a TODO tag there)

      There might be other issues but all-in-all, the current status on our side is that I can't have this code working with shibboleth 2.4.

      Attachments

        Issue Links

          Activity

            People

              lucaboesch Luca Bösch
              odyx Didier Raboud
              David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo
              Votes:
              7 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: