There's a good description of this issue at: http://groups.google.com/group/shibboleth-dev/browse_thread/thread/6a8889a32e8c9382/2083b4078dd02edb?lnk=raot
This is been fixed upstream and it would be nice if Debian could apply the patch to previous releases.
6728126.patch
Description: Binary data
