The Shibboleth Service Provider do not create sessions corretly

Cantor, Scott cantor.2 at osu.edu
Thu May 31 15:26:27 BST 2012


On 5/31/12 10:10 AM, "David Tello Morales"
<david.tello at whitebearsolutions.com> wrote:
>
>I have a Shibboleth SP configured with Apache2.2. I know that i have all
>configured correctly, but my SP cannot create the sessions. I'm testing
>with no shibboleth IDPs. Two options, SimpleSAML and JOSSO. The binding
>used in both cases to do SSO is HttpRedirent,
> and in both cases the result is the same my SP send infinite
>SAMLRequests to the IDP.

Looping is caused by a cookie or http/https mismatch kind of issue, it's
not something anybody else can generally diagnose for you. You have to
trace everything and identify why the session cookie isn't sent back at
the final step, assuming no logs indicate that the session is being
invalidated each time due to an IP address issue.

The wiki covers this.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping

>In the log files shows that the sessions are created correctly, but show
>attribute mapping errors. May be this the cause?

I doubt it.

Please turn off the horribly large graphic in your email signature. It's
far too large for email (which should be plain text in any case, never
HTML). I let this message through, but I will let the list block any
others with it.

-- Scott



More information about the users mailing list