IdP SSO not working

[Sara Hopkins]

On 22/02/2012 21:33, Chad La Joie wrote:

> That's probably going to be a problem.  It may be the problem here
> but even if it's not it's likely to cause issues in the future.

Indeed. I'll see what I can do to get that fixed. (Thanks Peter Schoeber 
for your suggestions about that)

> Well, in all cases like this, it comes down to a cookie issue.  You
> said the cookie was getting to the IdP so it's more likely that the
> IdP is rejecting the cookie.  The most common reason for that is IP
> address issues (as noted above).  I've also seen other cases though
> where the cookie value is corrupted in some way (e.g., truncated).

Actually I said that cookies are getting to the browser, but I don't 
know if the particular cookie we're concerned with is getting to the 
IdP; can you tell me which one it would be, please? I've looked in the 
wiki but haven't been able to find any documentation that tells me the 
name of the IdP session cookie.

> So, my advice would be to turn on debug logging for
> edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter and
> see what it says when it is inspecting the cookie.

Logging is already set to DEBUG for everything under 
edu.internet2.middleware.shibboleth. I can't see anything logged 
indicating it is inspecting any cookies. What I am seeing is lots of 
lines like this (but with different session ID values):

06:05:12.955 - DEBUG 
[edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:160] - 
No session associated with session ID 
NzQxNmVkZTJkMjkwNGUxNmFmNTM1OTVjZGY3ZmI1ZGU2MTZmMjdjODRmYTUwY2RjY2FmMDIyZjFmMjkwMDVkOQ== 
- session must have timed out

Thanks,

Sara
-- 
Sara Hopkins
Support Team
UK Access Management Federation for Education and Research
web:    http://www.ukfederation.org.uk/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.