Unable to parse SAML attributes and redirecting the request back to the URL

[Justin Russo]

HI Scott,
The thing is i never start with http.
while testing im always using https://myservername/app1.
it then redirects to idp and after i login is when the looping happens.

<Sessions lifetime="7200" timeout="3600" checkAddress="false" consistentAddress="true"
            handlerURL="/Shibboleth.sso" handlerSSL="true"
            exportLocation="http://localhost/Shibboleth.sso/GetAssertion"
            cookieProps="; path=/; secure; HttpOnly" 
            idpHistory="true" idpHistoryDays="7">

<SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Intranet"
                    relayState="cookie" entityID="https://abccompany.org/SAML2/IDP"
                    acsByIndex="false">
                <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/>
                <SessionInitiator type="Shib1" acsIndex="5"/>
            </SessionInitiator>


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, June 28, 2013 2:29 PM
Subject: Re: Unable to parse SAML attributes and redirecting the request back to the URL
 

On 6/28/13 2:08 PM, "Justin Russo" <justin9 at ymail.com> wrote:
>
>for cookieprops attribute i have the data as below
>cookieProps="; path=/; secure; HttpOnly"

And that's guaranteed to loop when you start with http to access a secured
page.

>do you suggest i provide any info which might  help us diagnose the
>reason its behaving as is ?

There is nothing you can provide short of a trace of every HTTP
transaction involved. But you can do that yourself.

All the information needed to understand the sequence is here:

https://wiki.shibboleth.net/confluence/display/SHIB2/FlowsAndConfig

That plus a Live Headers trace with Firefox almost always shows the
problem.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130628/b6617d63/attachment.html