ipsilon

#475 Recovered: Ipsilon sends empty AttributeStatement, violates specification
Closed: Fixed by t0xic0der. Opened by t0xic0der.

Closed: Fixed
Reopen Issue

The saml-core-2.0-os specification section 2.7.3 (page 29) requires the <AttributeStatement> element contain one or more <Attribute> or <EncryptedAttribute> elements.

But in ipsilon/providers/saml2/auth.py in saml2checks no test is performed to check if there are any attributes before the AttributeStatement is inserted, this can result in an empty <AttributeStatement> element.

Shibboleth checks for this and emits errors when it encounters an empty <AttributeStatement> element.

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.

Metadata Update from @t0xic0der:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.