Not getting SP resource after authentication
Zico
mailzico at gmail.com
Sun Oct 6 09:43:50 EDT 2013
Hi,
I have a Shib SP 2.5.2 setup and I am trying to SSO with Shib IdP. The issue is,
whenever I am hitting my SP, it is redirecting me to IdP for authentication but
after authentication instead of going to SP page, I am jumped to IdP login
again. I have tried to check all SP logs, but not getting much enough to
troubleshoot. Any kind of hint is appreciated. Just to add: my SP's hostname is
not "https" but it's "http" and SP is in IIS platform.
My SP's shibd.log is showing these:
2013-10-04 10:11:49 INFO Shibboleth.Application instantiate XMLConfigImpl
XMLApplication: building AttributeResolver of type Query...
2013-10-04 10:11:49 INFO Shibboleth.Application instantiate XMLConfigImpl
XMLApplication: building CredentialResolver of type File...
2013-10-04 10:11:49 INFO XMLTooling.SecurityHelper instantiate XMLConfigImpl
XMLApplication FilesystemCredentialResolver loadKeyFromFile: loading private key
from file (d:\apps\shibboleth-sp\etc\shibboleth\sp-key.key)
2013-10-04 10:11:49 INFO XMLTooling.SecurityHelper instantiate XMLConfigImpl
XMLApplication FilesystemCredentialResolver loadCertificatesFromFile: loading
certificate(s) from file (d:\apps\shibboleth-sp\etc\shibboleth\sp-cert.crt)
2013-10-04 10:11:49 INFO Shibboleth.Listener instantiate XMLConfigImpl
XMLApplication: registered remoted message endpoint
(default::getHeaders::Application)
2013-10-04 10:11:49 INFO Shibboleth.AttributeFilter reload: reload thread
started...running when signaled
2013-10-04 10:11:49 INFO Shibboleth.Listener init: listener service starting
2013-10-04 10:12:41 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:0.9.2342.19200300.100.1.1
2013-10-04 10:12:41 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:0.9.2342.19200300.100.1.3
2013-10-04 10:12:41 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.4
2013-10-04 10:12:41 INFO Shibboleth.AttributeExtractor.XML [1]: skipping
unmapped SAML 2.0 Attribute with Name: urn:oid:2.5.4.42
2013-10-04 10:12:41 INFO Shibboleth.SessionCache [1] insert: new session
created: ID (_57c7e9fbb741b7ddb4fa5de5f8fd42de) IdP
(https://idp.my.com/idp/shibboleth)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (10.0.0.202)
SP's native.log is showing:
2013-10-04 10:12:25 WARN Shibboleth.SessionCache instantiate XMLConfigImpl:
cacheTimeout property is deprecated in favor of cacheAllowance (see
documentation)
2013-10-04 10:12:25 INFO Shibboleth.Config instantiate XMLConfigImpl: building
RequestMapper of type Native...
2013-10-04 10:12:25 WARN Shibboleth.Application instantiate XMLConfigImpl
XMLApplication: custom cookieProps setting should include "; secure" for
SSL/TLS-only usage
2013-10-04 10:12:25 WARN Shibboleth.Application instantiate XMLConfigImpl
XMLApplication: handlerSSL should be enabled for SSL/TLS-enabled web sites
2013-10-04 10:12:25 INFO Shibboleth.SessionCache cleanup: cleanup thread
started...run every 900 secs; timeout after 900 secs
--
Best,
Zico
More information about the users
mailing list