dev Digest, Vol 42, Issue 33
Amit Thukral
amit.thukral403 at gmail.com
Tue Jan 6 13:48:22 EST 2015
Hi Scott,
I am unable to find response for my following query in my mailbox. If you
have already replied, could you pls point me to the response again ?
Thanks !!
Amit Thukral
On Dec 23, 2014 10:30 PM, <dev-request at shibboleth.net> wrote:
> Send dev mailing list submissions to
> dev at shibboleth.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://shibboleth.net/mailman/listinfo/dev
> or, via email, send a message with subject or body 'help' to
> dev-request at shibboleth.net
>
> You can reach the person managing the list at
> dev-owner at shibboleth.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of dev digest..."
>
>
> Today's Topics:
>
> 1. Re: dev Digest, Vol 42, Issue 26 (Amit Thukral)
> 2. Re: Freeze v3 (Daniel Fisher)
> 3. Re: dev Digest, Vol 42, Issue 26 (Cantor, Scott)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 22 Dec 2014 23:46:57 +0530
> From: Amit Thukral <amit.thukral403 at gmail.com>
> Subject: Re: dev Digest, Vol 42, Issue 26
> To: "dev at shibboleth.net" <dev at shibboleth.net>
> Message-ID:
> <CAJ62q=yofJCDwQnDxogJ9m2FkvH_Ub=+aAEiL13iaXh7kgAy=
> g at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Scott,
>
> Thanks for the previous response.
> I could find the previous issue and could fix it.
> Now the LogoutReuest received at SP-2 is fine and is being processed but
> still its not getting through.
> I am getting RequestDenied but unable to understand the reason for the
> same. Transaction logs say that the session was distroyed. Following are
> the request and response msgs:
>
>
> *<samlp:LogoutRequest ID="_cc692418-9396-4ba1-ae96-8c9411258463"
> Version="2.0" IssueInstant="2014-12-22T17:37:59.970Z"
> Destination="https://waf6sp1app1.com/Saml.sso/SLO/Redirect
> <https://waf6sp1app1.com/Saml.sso/SLO/Redirect>"
> NotOnOrAfter="2014-12-22T18:37:59.970Z"
> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><Issuer
> xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
> https://sts.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/
> <https://sts.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/
> ></Issuer><NameID
>
> xmlns="urn:oasis:names:tc:SAML:2.0:assertion">3mZ23mGKvN_5-f8hG1k5r6nFNhdZvRmh5QjWGjQZDdE</NameID><samlp:SessionIndex>_c63793b5-8d60-4306-b56e-70c6669aebff</samlp:SessionIndex></samlp:LogoutRequest>*
>
>
> *<samlp:LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
> Destination="
> https://login.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/saml2
> <https://login.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/saml2>"
> ID="_91fb9446cda1b937fa8c34208b001457"
> InResponseTo="_cc692418-9396-4ba1-ae96-8c9411258463"
> IssueInstant="2014-12-22T17:38:14Z" Version="2.0"><saml:Issuer
> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
> https://waf6sp1app1.com/samlsso
> <https://waf6sp1app1.com/samlsso
> ></saml:Issuer><samlp:Status><samlp:StatusCode
> Value="urn:oasis:names:tc:SAML:2.0:status:Requester"><samlp:StatusCode
>
> Value="urn:oasis:names:tc:SAML:2.0:status:RequestDenied"/></samlp:StatusCode><samlp:StatusMessage>Error
> processing
> request.</samlp:StatusMessage></samlp:Status></samlp:LogoutResponse>*
>
>
> *2014-12-22 09:38:14 INFO Shibboleth-TRANSACTION [1]: Destroyed session
> (applicationId: svc_3_pol1) (ID: _9c7176ee797f5ce3308406f1c0f7b7d1)*
>
> Thanks in advance for the help.
> Regards,
> Amit Thukral
>
>
> On Thu, Dec 18, 2014 at 10:30 PM, <dev-request at shibboleth.net> wrote:
>
> > Send dev mailing list submissions to
> > dev at shibboleth.net
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://shibboleth.net/mailman/listinfo/dev
> > or, via email, send a message with subject or body 'help' to
> > dev-request at shibboleth.net
> >
> > You can reach the person managing the list at
> > dev-owner at shibboleth.net
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of dev digest..."
> >
> >
> > Today's Topics:
> >
> > 1. Re: Facing issue with Single Logout. (Cantor, Scott)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Thu, 18 Dec 2014 16:26:31 +0000
> > From: "Cantor, Scott" <cantor.2 at osu.edu>
> > Subject: Re: Facing issue with Single Logout.
> > To: Shib Dev <dev at shibboleth.net>
> > Message-ID: <59715D3C-80BE-4053-8B15-0C23D4919D50 at osu.edu>
> > Content-Type: text/plain; charset="utf-8"
> >
> > On 12/18/14, 4:17 PM, "Amit Thukral" <amit.thukral403 at gmail.com> wrote:
> > >
> > >shibd.log
> > >
> > >=========
> > >2014-12-17 21:55:29 ERROR XMLTooling.ParserPool [9] handleError: fatal
> > >error on line 1, column 1, message: An exception occurred!
> > >Type:UTFDataFormatException, Message:invalid byte 1 () of a 1-byte
> > >sequence.
> > >2014-12-17 21:55:29 ERROR Shibboleth.Listener [9]: error processing
> > >incoming message: XML error(s) during parsing, check log for specifics
> > >
> > >
> > >Is it because that the Logout Request reaching at SP-2 contains the
> > >entityID of SP-1 in issuer element which SP-2 has no knowledge of ?
> >
> > No, it means what it says, the XML is invalid. The message was not
> encoded
> > correctly or was bad XML in the first place.
> >
> > -- Scott
> >
> >
> > ------------------------------
> >
> > --
> > To unsubscribe from this list send an email to
> > dev-unsubscribe at shibboleth.net
> >
> > End of dev Digest, Vol 42, Issue 26
> > ***********************************
> >
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://shibboleth.net/pipermail/dev/attachments/20141222/05795113/attachment-0001.html
>
> ------------------------------
>
> Message: 2
> Date: Mon, 22 Dec 2014 13:45:04 -0500
> From: Daniel Fisher <dfisher at vt.edu>
> Subject: Re: Freeze v3
> To: Shib Dev <dev at shibboleth.net>
> Message-ID:
> <
> CAFC6YwQ2Fsu8Q4McpjLFu7UdK3Z_O_7mbhpkSKjWfQXCN6VAYA at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> On Mon, Dec 22, 2014 at 11:51 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> > On 12/22/14, 4:33 PM, "Daniel Fisher" <dfisher at vt.edu> wrote:
> >
> > >On Fri, Dec 19, 2014 at 10:44 PM, Cantor, Scott
> > ><cantor.2 at osu.edu> wrote:
> > >
> > >V2 upgrade findings
> > >- out of the box, you do get a low level Spring error message and it's
> > >very noisy when it can't find the LDAP server cert, but it does say
> > >FileNotFound at the bottom of the mess
> > >
> > >Took an AI from this:
> > >https://github.com/vt-middleware/ldaptive/issues/19
> > ><https://github.com/vt-middleware/ldaptive/issues/19>
> > >Future versions of ldaptive may not be as noisy.
> >
> > IIRC it's a Spring error failing to load the context, so I don't know
> that
> > it's anything you have control over.
>
>
> Ok. I know ldaptive emits an error log for every connection that fails. I
> thought that may be the culprit. Regardless, I'll take a pass at the log
> levels and make sure they're sane.
>
> --Daniel Fisher
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://shibboleth.net/pipermail/dev/attachments/20141222/858e787c/attachment-0001.html
>
> ------------------------------
>
> Message: 3
> Date: Mon, 22 Dec 2014 18:50:22 +0000
> From: "Cantor, Scott" <cantor.2 at osu.edu>
> Subject: Re: dev Digest, Vol 42, Issue 26
> To: Shib Dev <dev at shibboleth.net>
> Message-ID: <5EC306F8-7A59-4055-A068-73217FA971C4 at osu.edu>
> Content-Type: text/plain; charset="utf-8"
>
> On 12/22/14, 6:16 PM, "Amit Thukral" <amit.thukral403 at gmail.com> wrote:
>
> >Now the LogoutReuest received at SP-2 is fine and is being processed but
> >still its not getting through.
> >I am getting RequestDenied but unable to understand the reason for the
> >same. Transaction logs say that the session was distroyed. Following are
> >the request and response msgs:
>
> I'm not going to go scouring source code for the status code unless there
> are no logs indicating why it handled the request that way.
>
> -- Scott
>
>
> ------------------------------
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
> End of dev Digest, Vol 42, Issue 33
> ***********************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150107/4e48d83c/attachment.html
More information about the dev
mailing list