IDP 2.3.6 Stops Sending SAML 1 Responses.
Montoya,Jose T
jtmontoya at mdanderson.org
Mon Apr 30 20:08:15 BST 2012
My apologies in advance is this is not the appropriate method to post a request for assistance.
I have implemented a new shibboleth IDP which runs fine for a little while. After sometime it will continue to process incoming requests but fails to send the final response to the client.
My implementation is:
IDP v 2.3.6
Red Hat Enterprise Linux Server release 6.2
java version "1.6.0_25"
Java(TM) SE Runtime Environment (build 1.6.0_25-b06)
Java HotSpot(TM) 64-Bit Server VM (build 20.0-b11, mixed mode)
Tomcat 6.0.35
The only indication of an issue is that I see this normal message:
14:03:53.703 - DEBUG [org.opensaml.ws.message.encoder.BaseMessageEncoder:56] - Successfully encoded message.
But not the following:
14:03:53.703 - INFO [Shibboleth-Audit:711] - 20120430T190353Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest||https://somehosts|urn:mace:shibboleth:2.0:profiles:saml1:sso|https://somehost/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:profiles:browser-post|_29a9b91bfcc851f4399b7b6908fcce92|someUser|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||SomeUser@Domain|_f55cb9a12f0a88c502080b14b7fb2d3b,|
There are no additional errors in the logs.
What other debugging options can I turn on the shibboleth login properties that may provide some insight?
Thank you,
Jose T. Montoya
This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein is strictly prohibited. If you receive this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120430/891c3fac/attachment.html
More information about the users
mailing list