The Shibboleth Service Provider do not create sessions corretly
David Tello Morales
david.tello at whitebearsolutions.com
Thu May 31 15:49:10 BST 2012
Thanks for your reponse Scott.
I go to read the wiki link now!
Sorry for the email signature...never more.
ThankS!!!
El 31/05/12 16:26, Cantor, Scott escribió:
> On 5/31/12 10:10 AM, "David Tello Morales"
> <david.tello at whitebearsolutions.com> wrote:
>> I have a Shibboleth SP configured with Apache2.2. I know that i have all
>> configured correctly, but my SP cannot create the sessions. I'm testing
>> with no shibboleth IDPs. Two options, SimpleSAML and JOSSO. The binding
>> used in both cases to do SSO is HttpRedirent,
>> and in both cases the result is the same my SP send infinite
>> SAMLRequests to the IDP.
> Looping is caused by a cookie or http/https mismatch kind of issue, it's
> not something anybody else can generally diagnose for you. You have to
> trace everything and identify why the session cookie isn't sent back at
> the final step, assuming no logs indicate that the session is being
> invalidated each time due to an IP address issue.
>
> The wiki covers this.
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping
>
>> In the log files shows that the sessions are created correctly, but show
>> attribute mapping errors. May be this the cause?
> I doubt it.
>
> Please turn off the horribly large graphic in your email signature. It's
> far too large for email (which should be plain text in any case, never
> HTML). I let this message through, but I will let the list block any
> others with it.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list