Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-34482

shibboleth logout handler is broken in several ways

    XMLWordPrintable

    Details

    • Affected Branches:
      MOODLE_23_STABLE, MOODLE_27_STABLE, MOODLE_28_STABLE

      Description

      While testing

      https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPNotify and in particular
      https://wiki.shibboleth.net/confluence/display/SHIB2/SLOWebappAdaptation

      I noticed I was consistently getting 404 errors from the Soap exchange on the shibboleth side. As far as I can read the code, there are multiple problems with the code:

      a) line 34: the use of HTTP_RAW_POST_DATA most probably needs always_populate_raw_post_data in php.ini . And using HTTP_RAW_POST_DATA is deprecated in favour of using php://input
      b) from line 168: the database session handling has to get rewritten (there's a TODO tag there)

      There might be other issues but all-in-all, the current status on our side is that I can't have this code working with shibboleth 2.4.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                7 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: