payload: {"action":"created","issue":{"url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/205","repository_url":"https://api.github.com/repos/IdentityPython/SATOSA","labels_url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/205/labels{/name}","comments_url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/205/comments","events_url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/205/events","html_url":"https://github.com/IdentityPython/SATOSA/issues/205","id":415140859,"node_id":"MDU6SXNzdWU0MTUxNDA4NTk=","number":205,"title":"Rocket Chat - Shibboleth configuration problem","user":{"login":"tbellembois","id":18054222,"node_id":"MDQ6VXNlcjE4MDU0MjIy","avatar_url":"https://avatars1.githubusercontent.com/u/18054222?v=4","gravatar_id":"","url":"https://api.github.com/users/tbellembois","html_url":"https://github.com/tbellembois","followers_url":"https://api.github.com/users/tbellembois/followers","following_url":"https://api.github.com/users/tbellembois/following{/other_user}","gists_url":"https://api.github.com/users/tbellembois/gists{/gist_id}","starred_url":"https://api.github.com/users/tbellembois/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tbellembois/subscriptions","organizations_url":"https://api.github.com/users/tbellembois/orgs","repos_url":"https://api.github.com/users/tbellembois/repos","events_url":"https://api.github.com/users/tbellembois/events{/privacy}","received_events_url":"https://api.github.com/users/tbellembois/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-02-27T14:04:35Z","updated_at":"2019-03-05T10:30:52Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\n\r\nI am trying to configure SATOSA in front of a Rocket Chat server to enable Shibboleth authentication because Rocket Chat does not support IDP discovery.\r\n\r\nI am properly redirected to the Renater WAYF page but I have this error:\r\n```The return URL 'https://authproxy.dsi.uca.fr/Saml2/disco' could not be verified for Service Provider 'https://rocket.dsi.uca.fr/_saml/metadata/uca'```\r\n\r\n`https://rocket.dsi.uca.fr/_saml/metadata/uca` is declared as a SP in the Renater federation.\r\n\r\nHere is my `proxy_conf.xml` file:\r\n```\r\n#--- SATOSA Config ---#\r\nBASE: https://authproxy.dsi.uca.fr\r\nINTERNAL_ATTRIBUTES: \"internal_attributes.yaml\"\r\nCOOKIE_STATE_NAME: \"_saml_idp\"\r\nSTATE_ENCRYPTION_KEY: \"mysupersecurekey\"\r\nCUSTOM_PLUGIN_MODULE_PATHS:\r\n  - \"plugins/backends\"\r\n  - \"plugins/frontends\"\r\n  - \"plugins/micro_services\"\r\nBACKEND_MODULES:\r\n  - \"plugins/backends/saml2_backend.yaml\"\r\nFRONTEND_MODULES:\r\n  - \"plugins/frontends/saml2_frontend.yaml\"\r\nMICRO_SERVICES:\r\n  - \"plugins/microservices/static_attributes.yaml\"\r\n...\r\n```\r\nI can not figure out where I am wrong.\r\n\r\nI have attached the SAML2 frontend and backend files and a screenshot of my rocket configuration.\r\n\r\nIf somebody that has successfully installed SATOSA for Rocket Chat could give me some sample configuration files this could help me.\r\n\r\nRegards\r\n\r\n![rocket](https://user-images.githubusercontent.com/18054222/53495719-ca04c780-3aa0-11e9-97d4-8a97f31b6f68.png)\r\n\r\n[saml2_backend_yaml.txt](https://github.com/IdentityPython/SATOSA/files/2910579/saml2_backend_yaml.txt)\r\n[saml2_frontend_yaml.txt](https://github.com/IdentityPython/SATOSA/files/2910580/saml2_frontend_yaml.txt)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/comments/469628439","html_url":"https://github.com/IdentityPython/SATOSA/issues/205#issuecomment-469628439","issue_url":"https://api.github.com/repos/IdentityPython/SATOSA/issues/205","id":469628439,"node_id":"MDEyOklzc3VlQ29tbWVudDQ2OTYyODQzOQ==","user":{"login":"tbellembois","id":18054222,"node_id":"MDQ6VXNlcjE4MDU0MjIy","avatar_url":"https://avatars1.githubusercontent.com/u/18054222?v=4","gravatar_id":"","url":"https://api.github.com/users/tbellembois","html_url":"https://github.com/tbellembois","followers_url":"https://api.github.com/users/tbellembois/followers","following_url":"https://api.github.com/users/tbellembois/following{/other_user}","gists_url":"https://api.github.com/users/tbellembois/gists{/gist_id}","starred_url":"https://api.github.com/users/tbellembois/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tbellembois/subscriptions","organizations_url":"https://api.github.com/users/tbellembois/orgs","repos_url":"https://api.github.com/users/tbellembois/repos","events_url":"https://api.github.com/users/tbellembois/events{/privacy}","received_events_url":"https://api.github.com/users/tbellembois/received_events","type":"User","site_admin":false},"created_at":"2019-03-05T10:30:52Z","updated_at":"2019-03-05T10:30:52Z","author_association":"NONE","body":"A little update.\r\nI can now select an IDP from the Renater test WAYF but I have an error after the authentication.\r\n\r\nHere is the relevant log:\r\n```\r\n[2019-03-05 10:25:57] [DEBUG]: [urn:uuid:629cde76-44cd-4fea-bc21-864acd29fde9] Found existing common domain cookie Set-Cookie: _saml_idp=_Td6WFoAAATm1rRGAgAhARYAAAB0L-Wj4AMXAqVdABmdyOMSiFGAh_ndOU_Yy_fhMQldub8B8RyogPxwNAoy_WdyLoLh4X1_UAXxMMGtK5hFOqs-c6SOCoJkSjwzdGJHb8ewjA5aSZ4nwWBMWG-...[troncated]\r\n\r\n...\r\n\r\nUnicodeDecodeError: 'utf-8' codec can't decode byte 0xfd in position 0: invalid start byte\r\n[2019-03-05 10:25:57] [ERROR]: Unknown error\r\nTraceback (most recent call last):\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/base.py\", line 286, in run\r\n    resp = self._run_bound_endpoint(context, spec)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/base.py\", line 228, in _run_bound_endpoint\r\n    return spec(context)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/backends/saml2.py\", line 238, in authn_response\r\n    return self.auth_callback_func(context, self._translate_response(authn_response, context.state))\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/base.py\", line 197, in _auth_resp_callback_func\r\n    context, internal_response)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/micro_services/attribute_modifications.py\", line 17, in process\r\n    return super().process(context, data)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/micro_services/base.py\", line 33, in process\r\n    return self.next(context, data)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/base.py\", line 168, in _auth_resp_finish\r\n    return frontend.handle_authn_response(context, internal_response)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/frontends/saml2.py\", line 84, in handle_authn_response\r\n    return self._handle_authn_response(context, internal_response, self.idp)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/frontends/saml2.py\", line 381, in _handle_authn_response\r\n    self._set_common_domain_cookie(internal_response, http_args, context)\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/frontends/saml2.py\", line 462, in _set_common_domain_cookie\r\n    idp_list = [urlsafe_b64decode(b64_idp).decode('utf-8') for b64_idp in b64_idp_list]\r\n  File \"/opt/satosa/lib/python3.5/site-packages/satosa/frontends/saml2.py\", line 462, in <listcomp>\r\n    idp_list = [urlsafe_b64decode(b64_idp).decode('utf-8') for b64_idp in b64_idp_list]\r\nUnicodeDecodeError: 'utf-8' codec can't decode byte 0xfd in position 0: invalid start byte\r\n```\r\n\r\nI can not figure out where is my mistake. Any clue will be appreciated.\r\n\r\nRegards"}}
other: {"actor":{"display_login":"tbellembois"}}