Steven and I were both bufuddled by this error message. Make it easier to understand.
authorwassa <wassa@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Fri, 23 Apr 2004 19:43:12 +0000 (19:43 +0000)
committerwassa <wassa@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Fri, 23 Apr 2004 19:43:12 +0000 (19:43 +0000)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@1007 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

src/edu/internet2/middleware/shibboleth/aa/AAServlet.java

index dc1b214..45df278 100755 (executable)
@@ -258,7 +258,7 @@ public class AAServlet extends TargetFederationComponent {
                                        effectiveName = getEffectiveName(req, relyingParty);
                                } catch (InvalidProviderCredentialException ipc) {
                                        sendFailure(resp, samlRequest, new SAMLException(SAMLException.RESPONDER,
-                                       "Invalid credentials for request."));
+                                                       "Invalid credentials for request."));
                                        return;
                                }
                        }
@@ -285,12 +285,11 @@ public class AAServlet extends TargetFederationComponent {
                        if (relyingParty.getIdentityProvider().getProviderId() != null
                                        && !relyingParty.getIdentityProvider().getProviderId().equals(
                                                        attributeQuery.getSubject().getName().getNameQualifier())) {
-                               log.error("The name qualifier for the referenced subject ("
+                               log.error("The name qualifier (" + attributeQuery.getSubject().getName().getNameQualifier()
+                                               + ") for the referenced subject is not valid for this identiy provider.");
+                               throw new NameIdentifierMappingException("The name qualifier ("
                                                + attributeQuery.getSubject().getName().getNameQualifier()
-                                               + ") is not valid for this identiy provider.");
-                               throw new NameIdentifierMappingException("The name qualifier for the referenced subject ("
-                                               + attributeQuery.getSubject().getName().getNameQualifier()
-                                               + ") is not valid for this identiy provider.");
+                                               + ") for the referenced subject is not valid for this identiy provider.");
                        }
 
                        Principal principal = null;