ERR-Auth/External- No conversation state found in session

Surinaidu Majji pioneer.suri at gmail.com
Thu Jun 18 02:22:49 EDT 2015


Yes, Earlier we were not aware of significance of 'conversation' . Also the
'key' returned by 'startexternalAuthentication' API was empty, and
conversation state was not preserved between 'startexternalAuthentication'
and 'finishExternalAuthentication' as mentioned in the wiki doc , this was
creating problem , *now it got rectified .*

Pseudo code :
*before login*
key =ExternalAuthentication.startexternalAuthentication(request);
preserveKey();
*after successful login *
ExternalAuthentication.finishexternalAuthentication(key,request,response);

Please let us know in case of any gaps in our understanding(s)


On Wed, Jun 17, 2015 at 7:41 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/17/15, 3:11 AM, "dev on behalf of Surinaidu Majji" <
> dev-bounces at shibboleth.net on behalf of pioneer.suri at gmail.com> wrote:
>
> >
> >Construction of principle is as follows::
> >
> >
> >                             Principal principal = new
> UsernamePrincipal(principleName);
> >
> >Subject subj = new Subject();
> >subj.getPrincipals().add(principal);
> >request.setAttribute(ExternalAuthentication.PRINCIPAL_KEY, principal);
> >request.setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, key);
> >request.setAttribute(ExternalAuthentication.SUBJECT_KEY, subj);
>
> You ignored everything I wrote you already about not doing all of that.
> Furthermore, what is key? It certainly isn't a principal name.
>
> >                              String key ="";
>
> Now you've cleared the key.
>
> >ExternalAuthentication.finishExternalAuthentication(key, request,
> response);
>
> And now you're trying to use an empty key as the conversation ID in the
> API.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150618/47b94611/attachment.html>


More information about the dev mailing list