Upgrade to IDP 2.4.0 - Can not login

Thu Oct 17 13:06:56 EDT 2013

If it helps, this is the output from idp-process.log (DEBUG)

DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:170] - Attempting to authenticate user yusuf.test
18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:180] - useFirstPass = false
18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:181] - tryFirstPass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:182] - storePass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:183] - clearPass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:184] - setLdapPrincipal = false
18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:185] - setLdapDnPrincipal = false
18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:186] - setLdapCredential = true
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:187] - defaultRole = []
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:188] - principalGroupName = null
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:189] - roleGroupName = null
18:03:29.807 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:77] - userRoleAttribute = []
18:03:29.834 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:83] - Created authenticator: edu.vt.middleware.ldap.auth.AuthenticatorConfig at 979096278::env={java.naming.provider.url=ldaps://192.168.148.134:636 ldaps://192.168.148.210:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}
18:03:29.836 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField
18:03:29.837 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:
18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] -   dn = ou=Students,dc=kicds,dc=com
18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] -   filter = (sAMAccountName={0})
18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] -   filterArgs = [yusuf.test]
18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] -   searchControls = javax.naming.directory.SearchControls at 7bdad0b1
18:03:29.840 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] -   handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 5abb53fd]
18:03:29.840 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:
18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] -   authtype = simple
18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] -   dn = idp.ldap at kicds.com
18:03:29.842 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] -   credential = <suppressed>
18:03:29.852 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps
18:03:29.867 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 170cf6e0
18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 10cd263e
18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:
18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] -   hostname = 192.168.148.210
18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] -   cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK
18:03:29.871 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]
18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210
18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl at 170cf6e0
18:03:29.873 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 10cd263e
18:03:30.098 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:
18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] -   authtype = simple
18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] -   dn = CN=yusuf test,ou=Students,dc=kicds,dc=com
18:03:30.100 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] -   credential = <suppressed>
18:03:30.107 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps
18:03:30.116 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 544bdeaa
18:03:30.118 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 6c8a1aa3
18:03:30.119 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:
18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] -   hostname = 192.168.148.210
18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] -   cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK
18:03:30.121 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]
18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210
18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl at 544bdeaa
18:03:30.123 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 6c8a1aa3
18:03:30.336 - INFO [edu.vt.middleware.ldap.jaas.JaasAuthenticator:176] - Authentication succeeded for dn: CN=yusuf test,ou=Students,dc=kicds,dc=com
18:03:30.340 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField
18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:
18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] -   dn = ou=Students,dc=kicds,dc=com
18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] -   filter = (sAMAccountName={0})
18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] -   filterArgs = [yusuf.test]
18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] -   searchControls = javax.naming.directory.SearchControls at 8d40863
18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] -   handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 5abb53fd]
18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:223] - Committed the following principals: []
18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:229] - Committed the following roles: []
18:03:30.353 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178] - Successfully authenticated user yusuf.test
18:03:30.356 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine
18:03:30.357 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.360 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.361 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request
18:03:30.362 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.364 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514] - Completing user authentication process
18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585] - Validating authentication was performed successfully
18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:696] - Updating session information for principal yusuf.test
18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:700] - Creating shibboleth session for principal yusuf.test
18:03:30.370 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36) called.
18:03:30.373 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.408 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.
18:03:30.409 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:815] - Adding IdP session cookie to HTTP response
18:03:30.411 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:715] - Recording authentication and service information in Shibboleth session for principal: yusuf.test
18:03:30.413 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, yusuf.test) called.
18:03:30.419 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, 4153623746e6d7e5d53c957d4b7dea1513abfb5dca88c3bfe40cb9c8898a2268) called.
18:03:30.436 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:560] - User yusuf.test authenticated with method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
18:03:30.437 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161] - Returning control to profile handler
18:03:30.437 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.440 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.440 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177] - Redirecting user to profile handler at https://idp.kaplaninternational.com:443/idp/profile/SAML2/Redirect/SSO
18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedServletFilter:58] - Session available, storing on memcached...
18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0) called.
18:03:30.453 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...
18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36
18:03:30.461 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36) called.
18:03:30.472 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...
18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.
18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO
18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler
18:03:30.532 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.535 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:588] - Unbinding LoginContext
18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:614] - Expiring LoginContext cookie
18:03:30.537 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:328] - storageService.remove( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:625] - Removed LoginContext, with key f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6, from StorageService partition loginContexts
18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:172] - Incoming request contains a login context and indicates principal was authenticated, processing second leg of request
18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.547 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.547 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.548 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth, looking up configuration based on metadata groups.
18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth. Using default relying party configuration.
18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://idp.kaplaninternational.com/idp/shibboleth
18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://idp.kaplaninternational.com/idp/shibboleth
18:03:30.559 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:99] - Filtering peer endpoints.  Supported peer endpoint bindings: [urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact]
18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/ECP because its binding urn:oasis:names:tc:SAML:2.0:bindings:PAOS is not supported
18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/POST because its binding urn:oasis:names:tc:SAML:1.0:profiles:browser-post is not supported
18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/Artifact because its binding urn:oasis:names:tc:SAML:1.0:profiles:artifact-01 is not supported
18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69] - Selecting endpoint by ACS URL 'https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/POST' and protocol binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' for request '_e5fc1da29ac3349042a11f3584cf383b' from entity 'https://pass-mgt.kaplaninternational.com/shibboleth'
18:03:30.562 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:289] - Authentication failure, session missing during completion of profile handler
18:03:30.578 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.582 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns null
18:03:30.582 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:360] - No login context in storage service
18:03:30.583 - DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display

Regards
Yusuf

From: Yusuf Tran
Sent: 17 October 2013 18:03
To: users at shibboleth.net
Subject: Upgrade to IDP 2.4.0 - Can not login

Hi Guys,

I'm working on upgrading our IDP from version 2.3.8 to 2.4.0, I've taken great care to merge in the customisations (ldap, memcache, custom login pages etc) but after installation I keep getting the warning mentioned on this page:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges
'Cookie-Related Error Handling Change'

This is after I hit the login page and attempt a login.

Can someone help point me in the right direction?

Regards
Yusuf

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131017/10b023dc/attachment-0001.html 