"LoginContext key cookie was not present in request" with particular SP
Ian Rifkin
irifkin at brandeis.edu
Thu Jun 27 17:15:38 EDT 2013
Hi,
My metadata file: https://shibboleth.brandeis.edu/metadata.xml
When going to their URL in my Web browser it seems that it sends me to
https://shibboleth.brandeis.edu/idp/profile/Shibboleth/SSO?SAMLRequest=<a
long string of jibberish goes here>.
I think this is my full info from logs with debug on:
12:03:24.415 - INFO [Shibboleth-Access:74] - 20130626T160324Z|<MY
IP>|shibboleth.brandeis.edu:443|/profile/Shibboleth/SSO|
12:03:24.416 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86]
- shibboleth.HandlerManager: Looking up profile handler for request path:
/Shibboleth/SSO
12:03:24.416 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97]
- shibboleth.HandlerManager: Located profile handler of the following type
for the request path:
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler
12:03:24.416 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:325] -
LoginContext key cookie was not present in request
12:03:24.417 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler:148]
- Incoming request does not contain a login context, processing as first
leg of request
12:03:24.417 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler:214]
- Decoding message with decoder binding
urn:mace:shibboleth:1.0:profiles:AuthnRequest
12:03:24.418 - DEBUG
[org.opensaml.ws.message.decoder.BaseMessageDecoder:76] - Beginning to
decode message from inbound transport of type:
org.opensaml.ws.transport.http.HttpServletRequestAdapter
12:03:24.418 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODecoder:72]
- No providerId parameter given in Shibboleth SSO authentication request.
12:03:24.419 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler:243]
- Error decoding Shibboleth SSO request
org.opensaml.ws.message.decoder.MessageDecodingException: No providerId
parameter given in Shibboleth SSO authentication request.
at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODecoder.doDecode(ShibbolethSSODecoder.java:73)
~[shibboleth-identityprovider-2.3.8.jar:na]
at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79)
~[openws-1.4.4.jar:na]
at
org.opensaml.saml1.binding.decoding.BaseSAML1MessageDecoder.decode(BaseSAML1MessageDecoder.java:109)
~[opensaml-2.5.3.jar:na]
at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.decodeRequest(ShibbolethSSOProfileHandler.java:236)
[shibboleth-identityprovider-2.3.8.jar:na]
at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.performAuthentication(ShibbolethSSOProfileHandler.java:170)
[shibboleth-identityprovider-2.3.8.jar:na]
at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.processRequest(ShibbolethSSOProfileHandler.java:149)
[shibboleth-identityprovider-2.3.8.jar:na]
at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.processRequest(ShibbolethSSOProfileHandler.java:66)
[shibboleth-identityprovider-2.3.8.jar:na]
at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84)
[shibboleth-common-1.3.7.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
[shibboleth-identityprovider-2.3.8.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81)
[shibboleth-identityprovider-2.3.8.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
[shibboleth-common-1.3.7.jar:na]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
[catalina.jar:6.0.35]
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[catalina.jar:6.0.35]
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina.jar:6.0.35]
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
[catalina.jar:6.0.35]
at
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
[tomcat-coyote.jar:6.0.35]
at
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
[tomcat-coyote.jar:6.0.35]
at
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776)
[tomcat-coyote.jar:6.0.35]
at
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705)
[tomcat-coyote.jar:6.0.35]
at
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898)
[tomcat-coyote.jar:6.0.35]
at
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
[tomcat-coyote.jar:6.0.35]
at java.lang.Thread.run(Thread.java:662) [na:1.6.0_24]
12:03:24.421 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:325] -
LoginContext key cookie was not present in request
12:03:24.422 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No
relying party, nothing to display
Any further help is appreciated.
Thanks again,
Ian
On Thu, Jun 27, 2013 at 4:52 PM, Nate Klingenstein <ndk at internet2.edu>wrote:
> I should've added, you didn't name the URL in your metadata associated
> with that binding. If that's /profile/Shibboleth/SSO, then your metadata
> is wrong and it should be /profile/SAML2/Redirect/SSO, but that would have
> to be a mistake of commission rather than omission.
>
> On Jun 27, 2013, at 20:44 , Ian Rifkin wrote:
>
> > I think they are referring to the location attribute on the
> SingleSignOnService
> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" element in my
> metadata file.
> >
> > Is there something wrong in my metadata file? Is the SP vendor reading
> the metadata document incorrectly? Other?
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
--
Ian Rifkin '04, MS '09
Software Systems Manager
Library and Technology Services (LTS)
Brandeis University
http://go.brandeis.edu/u:irifkin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130627/4880c197/attachment.html
More information about the users
mailing list