Aw: Re: Shibboleth Setup works on windows - on Linux redirect loop at /idp/profile/SAML2/Redirect/SSO

Thu Oct 3 08:42:01 EDT 2013

Hi,

sorry for the html mail, it was the default setting from webmail :/. Hope it is now only text :)

> Is there a specific reason you want to install the SP and the IDP and
> the protected resource (your application) on the same system?

It is a testing system. In my case I have to test different users with different privilegs. Cannot use the productive shibboleth with real data /passwords.

> N.B. that Ubuntu is not a supported OS (from the Shibboleth project)
> at least for the SP.

I know. But Windows 7 is also not supported, and it works. I think the OS should also work. I installed sp via apt-get. So I think somebody tested the sp in ubuntu.

I'm using SSL with self generated certificates.

My cookieProps line:

<Sessions lifetime="28800" timeout="3600" relayState="ss:mem" handlerURL="http://111.11.11.1/Shibboleth.sso" checkAddress="false" handlerSSL="false" cookieProps="http">

same setting from the windows machine. 

I'm not really sure about all the settings. At the end I want ssl at every site. I created certificates for apache and tomcat (idp created it itself).
I found sometimes a hint to change handlerSSL=true and cookieProps="; path=/; secure", but did not work for me. But maybe it would work for me and I have to change so other lines also, no idea :(

David

> Gesendet: Donnerstag, 03. Oktober 2013 um 14:15 Uhr
> Von: "Peter Schober" <peter.schober at univie.ac.at>
> An: users at shibboleth.net
> Betreff: Re: Shibboleth Setup works on windows - on Linux redirect loop at /idp/profile/SAML2/Redirect/SSO
>
> * morph3us87 at web.de <morph3us87 at web.de> [2013-10-03 13:11]:
> > <html><head></head><body><div style="font-family: Verdana;font-size:
> > 12.0px;"><div style="font-family: Verdana;font-size: 12.0px;">
> 
> Please don't send HTML-only emails to this list (or any public mailing
> list, really).
> 
> Is there a specific reason you want to install the SP and the IDP and
> the protected resource (your application) on the same system?
> 
> > <div>Now I want to install the same setup on a linux machine. I have
> > Ubuntu 12.04 LTS, 64 bit.</div>
> 
> N.B. that Ubuntu is not a supported OS (from the Shibboleth project)
> at least for the SP.
> 
> > <div>Now my problem:</div>
> [...]
> > <div>I'm redirected to the login page. I'm logging in
> > successful (log files says: I connected to ldap, got the user, all
> > fine,...). After this, I have a redirect loop at</div>
> 
> Does this help: Shib Documentation -> Troubleshooting -> NativeSP: Looping
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping
> 
> Do you use HTTPS anywhere? What's the value of cookieProps in your
> shibboelth2.xml?
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 