IDP 2.3.6 Stops Sending SAML 1 Responses.

[Chad La Joie]

You'll need to enable debug logging for the IdP and look to see what
is going on.  The behavior you describe is what you'd see if the IdP
was working and using the default logging config.

On Mon, Apr 30, 2012 at 15:08, Montoya,Jose T <jtmontoya at mdanderson.org> wrote:
>
>
> My apologies in advance is this is not the appropriate method to post a
> request for assistance.
>
>
>
> I have implemented a new shibboleth IDP which runs fine for a little while.
> After sometime it will continue to process incoming requests but fails to
> send the final response to the client.
>
>
>
> My implementation is:
>
> IDP v 2.3.6
>
> Red Hat Enterprise Linux Server release 6.2
>
> java version "1.6.0_25"
>
> Java(TM) SE Runtime Environment (build 1.6.0_25-b06)
>
> Java HotSpot(TM) 64-Bit Server VM (build 20.0-b11, mixed mode)
>
> Tomcat 6.0.35
>
>
>
> The only indication of an issue is that I see this normal message:
>
> 14:03:53.703 - DEBUG [org.opensaml.ws.message.encoder.BaseMessageEncoder:56]
> - Successfully encoded message.
>
>
>
> But not the following:
>
> 14:03:53.703 - INFO [Shibboleth-Audit:711] -
> 20120430T190353Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest||https://somehosts|urn:mace:shibboleth:2.0:profiles:saml1:sso|https://somehost/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:profiles:browser-post|_29a9b91bfcc851f4399b7b6908fcce92|someUser|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||SomeUser@Domain|_f55cb9a12f0a88c502080b14b7fb2d3b,|
>
>
>
> There are no additional errors in the logs.
>
> What other debugging options can I turn on the shibboleth login properties
> that may provide some insight?
>
>
>
>
>
> Thank you,
>
>
> Jose T. Montoya
>
>
>
>
> This transmission may contain information that is privileged, confidential,
> and/or exempt from disclosure under applicable law.  If you are not the
> intended recipient, you are hereby notified that any disclosure, copying,
> distribution, or use of the information contained herein is strictly
> prohibited.  If you receive this transmission in error, please immediately
> contact the sender and destroy the material in its entirety, whether in
> electronic or hard copy format.
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered