reasons for error.jsp to be displayed?

[Gene Matthews]

We have a fairly new installation of shibboleth-idp running (thanks to a lot of help from this list!). It seems to be working pretty well. We have a user that was directed to the error.jsp page after authentication. The idp-process.log shows the successful authentication (LDAP) and then these lines: 

10:33:13.106 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178] - Successfully authenticated user X 
10:33:13.107 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine 
10:33:13.107 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:360] - No login context in storage service 
10:33:13.108 - WARN [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:147] - No login context available, unable to return to authentication engine 
10:33:13.109 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:360] - No login context in storage service 
10:33:13.110 - DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display 
10:33:13.235 - DEBUG [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:180] - No session associated with session ID ee69bcabff9a8f5fa939a286e042f062ba82a7b4662e141a04a128da154c3ddc - session must have timed out 

Then logs show a successful sso login with assertion sent for same user at 10:39. I haven't been able to get from the user what they did between 10:33 and 10:39 (close and restart browser, clear cache, etc.). I'm trying to determine under what circumstances the user would get directed to error.jsp. I see in the wiki ( https://wiki.shibboleth.net/confluence/plugins/viewsource/viewpagesrc.action?pageId=3866867 ) that requestURL and errorText are available for use on this page. I didn't see them referenced in the error.jsp page built from install process. 

I'm suspecting this may have happened before and no one has reported it. Is there something I can search for in the idp-process.log that would show me the frequency of this? Is the WARN message above an indication of this problem? 

Can anyone point me in the right direction to: 

1. Determine possible reasons for landing on error.jsp page (this may be too broad a question and why the two variables are available to help troubleshoot), and 
2. Show me an example of how to use the requestURL and errorText variables in this page. 

Thanks, 

Gene 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131119/642ee003/attachment.html