[Bug 1897117] Re: liblasso3 on Bionic fails to process the ECP authn response

[Corey Bryant]

** Also affects: lasso (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Also affects: lasso (Ubuntu Groovy)
   Importance: Undecided
       Status: New

** Changed in: lasso (Ubuntu Groovy)
       Status: New => Triaged

** Changed in: lasso (Ubuntu Groovy)
   Importance: Undecided => High

** Changed in: lasso (Ubuntu Focal)
       Status: New => Triaged

** Changed in: lasso (Ubuntu Focal)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to lasso in Ubuntu.
https://bugs.launchpad.net/bugs/1897117

Title:
  liblasso3 on Bionic fails to process the ECP authn response

Status in lasso package in Ubuntu:
  Triaged
Status in lasso source package in Focal:
  Triaged
Status in lasso source package in Groovy:
  Triaged

Bug description:
  The liblasso3 package (dependency of libapache2-mod-auth-mellon) fails
  when processing a ECP authn response.

  Error message given by the Apache2 Mellon auth module:
  [auth_mellon:error] Error processing ECP authn response. Lasso error: [101] Signature element not found.

  This issue can be reproduced into an OpenStack environment with
  Keystone to Keystone federation, using Apache2 Mellon module for the
  SP (service provider).

  I managed to reproduce this on:
  * Ubuntu 18.04 (Bionic) with liblasso3 2.5.1-0ubuntu1.1
  * Ubuntu 20.04 (Focal) with liblasso3 2.6.0-7ubuntu1

  This was fixed in the upstream Lasso project
  (https://dev.entrouvert.org/issues/26828), and it is shipped with
  versions 2.6.1 or newer.

  I tested liblasso3 2.6.1 on both Bionic and Focal and it fixes the
  problem.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lasso/+bug/1897117/+subscriptions