Multi-tab login errors

[Mark Valites]

On Aug 4, 2011, at 5:01 PM, Russell Beall wrote:

> I am staging in the 2.3.3 release and we are expecting to go live this weekend, however, I have one issue which worries me about letting this loose.
> 
> I notice under my existing 2.1.5 environment, I can login to a site, and then use the "Open in Tabs" option in Safari or Firefox to open 31 separate Shibb'ed endpoints with the PreviousSession handler.  All of these sites load without errors.
> 
> Under the 2.3.3 environment, I am noticing that about half of these sites load correctly, and then the later tabs have an increasing frequency of throwing one of a set of different errors starting with the most frequent:
> 
> WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:344] - Error decoding authentication request message
> org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message
> 
> OR
> 
> ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:555] - Authentication failed with the error:
> edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No user identified by login handler.

We haven't tried opening lots of tabs, but we just rolled out 2.3.3 & are seeing a lot of this log entry (only). We're not getting any feedback that there's an issue though & not seeing any issue ourselves when we authenticate.

Is anything displayed in your browser?