dunno Carl. I'd rather the SP didn't do anything about displaying an error
page. I'd rather the IdP did that. I'd be more interested in an extension
to shibb to achieve that. i.e. instead of raking through templates,
redirect the browser to the IdP to handle the error in a documentable and
trainable way. I'm sure an extension to shib could just allow the SP to
auto POST some SAML back to the IdP's error handler service.
Alistair
--
mov eax,1
mov ebx,0
int 80h
> Hi Alistair
>
>>-----Original Message-----
>>From: Discussion list for Shibboleth developments [mailto:JISC-
>>[log in to unmask]] On Behalf Of Alistair Young
>>Sent: 08 May 2008 14:30
>>To: [log in to unmask]
>>Subject: The Griffin Page
>>
>>We're having some debates here about what to do about the Griffin page
>>when an SP barfs for some reason, whether it be non release of
>>attributes
>>or an internal barfing but the result is the same, a weird page for
>>the
>>user to contend with. We can put our helpdesk email in the IdP's
>>metadata
>>but there's no way to customise the error page at an SP (or is there?)
>
>
> Aren't all those error pages built from the templates pointed to by the
> attributes of the Errors element of shibboleth.xml on the SP?
>
> (I've got them in etc/shibboleth/errors but I may have installed them in
> a non-standard place)
>
> Obviously this is under the control of the SP, which makes it hard to be
> dealt with in documentation and training...
>
>
> Regards
>
> Carl
>
>
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Carl Vincent http://www.netskills.ac.uk/ (URL)
> Systems Manager 0191 222 5003 (voice)
> Netskills, Newcastle University 0191 222 5001 (fax)
> Training - Accreditation - Consultancy - Development
>
|