Shibboleth Developers

[Ronald Un <>]

Hi,
I am testing Shibboleth idp 2.2 and Shibboleth SP 2.3.1 with IIS7.5, ASP
and ASP.NET, I use Windows AD as user data source, and publish some user
attributes to SP.

In my Windows AD, there are some attributes contain Chinese characters, and
while I use ASP.NET to enumerate the request headers, it has no problem, the
attributes are all shown correctly and no missing of an attribute.

But in ASP (using UTF-8 encode), I found that when the value of an attribute
[A] contains only 1 chinese character (such as "人"), the next attribute [B]
(after [A]) is missing. Why I know that? Because I found [B] in the ALL_HTTP
and ALL_RAW headers. So I doubt that ASP doesn't deal with the multi-byte
characters header very well.

I have tried to modified the source code of IDP, URLEncode each published
attribute, and ASP can correctly enumerate all header attributes. But I think
if the URLEncode process can be placed in ISAPI SP and not IDP, it would be
much better.

I hope Shibboleth development team can analyze the problem and add the
URLEncode function in ISAPI SP.

Thanks.