Forum Discussion

Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Nov 10, 2015

APM - Multi-domain SSO - problem with trailing &

Hi,

 

Can somebody using APM with Multi domain SSO do me a favor and test something? I seem to be running into a problem when the Original URL that's requested ends with &

 

Normally:

 

  1. You ask for the content Virtual Server
  2. Redirect to Login VS with an URI like /F5Networks-SSO-Req?SSO_ORIG_URI=[encoded Original url]
  3. Get redirected to content VS with an URI like /F5Networks-SSO-Resp?SSO_ORIG_URI=...

Now, when my Original URL ends with &, I get the steps above twice! And also, the second time around, the Original URL is decoded when I get back in step 3. Resulting in a massive fail and

 

Nov 10 13:06:22 f5cmiprod err tmm[2212]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_multidomain_sso_decode_redirect_uri, Line: 11746 Nov 10 13:06:22 f5cmiprod err tmm[2212]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_check_uri_type, Line: 10565

 

So, can somebody try this? Just add an & to your URL at the end.

 

Tx Vincent