Question concerning login.jsp

Brewer, Edward L lee.brewer at Vanderbilt.Edu
Thu Apr 25 15:33:37 EDT 2013


To all,

I am currently running Shibboleth 2.3.6 on Linux under JBOSS 5.  I have been running it successfully for the last few years and I just made a change to the login.jsp page to accommodate mobile devices.  In the login.jsp I included the following

<script type="text/javascript">
<!--
if (screen.width <= 700) {
window.location = "https://vushib-idp.vanderbilt.edu/idp/login-mobile.jsp";
}
//-->
</script>

where the login-mobile.jsp is a scaled down version of the login.jsp.    The version of login.jsp  before the addition of the above script was a modified version of the default login.jsp, which was working just fine.  Now, when a user's browser is above 700 in width everything works fine.  When I hit the threshold below 700 I get the shibboleth error page, no ERROR or WARNS in the idp-process log .  Here is trace of the HTTP traffic (I still have the details of each step if needed).

FROM HTTPFox

00:01:51.122      0.219     620        1092      GET        302        Redirect to: https://vushib-idp-test.vanderbilt.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=<OMMIITED<https://vushib-idp-test.vanderbilt.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=%3cOMMIITED>> &RelayState=cookie%3A1366915521_73d9           https://sp.testshib.org/Shibboleth.sso/TestShib?entityID=https%3A%2F%2Fvushib-idp-test.vanderbilt.edu%2Fidp%2Fshibboleth
00:01:51.387      0.226     1215      231        GET        302        Redirect to: https://vushib-idp-test.vanderbilt.edu:443/idp/AuthnEngine https://vushib-idp-test.vanderbilt.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=<OMMITED>&RelayState=cookie%3A1366915521_73d9
00:01:51.642      0.035     671        231        GET        302        Redirect to: https://vushib-idp-test.vanderbilt.edu:443/idp/Authn/UserPassword               https://vushib-idp-test.vanderbilt.edu/idp/AuthnEngine
00:01:51.694      0.187     678        200        GET        200        text/html             https://vushib-idp-test.vanderbilt.edu/idp/Authn/UserPassword
00:01:51.971      0.053     619        (0)          GET        (Cache) text/html             https://vushib-idp-test.vanderbilt.edu/idp/Authn/UserPassword
00:01:52.065      0.046     336        (1150)    GET        (Cache) image/x-icon      https://vushib-idp-test.vanderbilt.edu/favicon.ico
00:01:52.069      0.087     481        223        GET        200        text/html             https://vushib-idp.vanderbilt.edu/idp/login-mobile.jsp
00:01:52.250      0.029     467        623        GET        200        image/jpeg         https://vushib-idp.vanderbilt.edu/idp/Login_vandy_files/images/headbg-ie6.jpg
00:01:52.253      0.048     481        4728      GET        200        image/jpeg         https://vushib-idp.vanderbilt.edu/idp/Login_vandy_files/images/vanderbilt-university-bb.jpg
00:01:52.328      0.025     331        (1150)    GET        (Cache) image/x-icon      https://vushib-idp.vanderbilt.edu/favicon.ico
00:01:52.331      0.033     301        (1150)    GET        (Cache) image/x-icon      https://vushib-idp.vanderbilt.edu/favicon.ico
00:02:01.911      0.078     590        787        POST      200        text/html             https://vushib-idp.vanderbilt.edu/idp/j_security_check
00:02:02.047      0.335     443        13926    GET        200        image/jpeg         https://vushib-idp.vanderbilt.edu/idp/images/logo.jpg
00:02:02.383      0.030     331        (1150)    GET        (Cache) image/x-icon      https://vushib-idp.vanderbilt.edu/favicon.ico

When I inspect login-mobile.jsp entry above I see the following.   For cookies

Sent:                     JSESSIONID and _utma
Received:            JESSIONID

I noticed on a good attempt I also have  _idp_session and/or _idp_athn_ic_key.

Is this because of the additional login-mobile.jsp?

If you need for me to post login.jsp and login-mobile.jsp  I can do that as well.

Thanks for your time,
Lee Brewer

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130425/d9e57d89/attachment.html 


More information about the users mailing list