Upgrade to IDP 2.4.0 - Can not login
Yusuf Tran
Yusuf.Tran at kaplan.com
Thu Oct 17 13:58:31 EDT 2013
In case it got missed, here's the debug output which might help:
If it helps, this is the output from idp-process.log (DEBUG)
DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:170] - Attempting to authenticate user yusuf.test
18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:180] - useFirstPass = false
18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:181] - tryFirstPass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:182] - storePass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:183] - clearPass = false
18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:184] - setLdapPrincipal = false
18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:185] - setLdapDnPrincipal = false
18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:186] - setLdapCredential = true
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:187] - defaultRole = []
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:188] - principalGroupName = null
18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:189] - roleGroupName = null
18:03:29.807 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:77] - userRoleAttribute = []
18:03:29.834 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:83] - Created authenticator: edu.vt.middleware.ldap.auth.AuthenticatorConfig at 979096278::env={java.naming.provider.url=ldaps://192.168.148.134:636 ldaps://192.168.148.210:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}
18:03:29.836 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField
18:03:29.837 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:
18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] - dn = ou=Students,dc=kicds,dc=com
18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] - filter = (sAMAccountName={0})
18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] - filterArgs = [yusuf.test]
18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] - searchControls = javax.naming.directory.SearchControls at 7bdad0b1
18:03:29.840 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 5abb53fd]
18:03:29.840 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:
18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple
18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn = idp.ldap at kicds.com
18:03:29.842 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed>
18:03:29.852 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps
18:03:29.867 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 170cf6e0
18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 10cd263e
18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:
18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] - hostname = 192.168.148.210
18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] - cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK
18:03:29.871 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]
18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210
18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl at 170cf6e0
18:03:29.873 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 10cd263e
18:03:30.098 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:
18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple
18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn = CN=yusuf test,ou=Students,dc=kicds,dc=com
18:03:30.100 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed>
18:03:30.107 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps
18:03:30.116 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 544bdeaa
18:03:30.118 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 6c8a1aa3
18:03:30.119 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:
18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] - hostname = 192.168.148.210
18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] - cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK
18:03:30.121 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]
18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210
18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl at 544bdeaa
18:03:30.123 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 6c8a1aa3
18:03:30.336 - INFO [edu.vt.middleware.ldap.jaas.JaasAuthenticator:176] - Authentication succeeded for dn: CN=yusuf test,ou=Students,dc=kicds,dc=com
18:03:30.340 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField
18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:
18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] - dn = ou=Students,dc=kicds,dc=com
18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] - filter = (sAMAccountName={0})
18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] - filterArgs = [yusuf.test]
18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] - searchControls = javax.naming.directory.SearchControls at 8d40863
18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler at 5abb53fd]
18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:223] - Committed the following principals: []
18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:229] - Committed the following roles: []
18:03:30.353 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178] - Successfully authenticated user yusuf.test
18:03:30.356 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine
18:03:30.357 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.360 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.361 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request
18:03:30.362 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.364 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514] - Completing user authentication process
18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585] - Validating authentication was performed successfully
18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:696] - Updating session information for principal yusuf.test
18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:700] - Creating shibboleth session for principal yusuf.test
18:03:30.370 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36) called.
18:03:30.373 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.408 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.
18:03:30.409 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:815] - Adding IdP session cookie to HTTP response
18:03:30.411 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:715] - Recording authentication and service information in Shibboleth session for principal: yusuf.test
18:03:30.413 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, yusuf.test) called.
18:03:30.419 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, 4153623746e6d7e5d53c957d4b7dea1513abfb5dca88c3bfe40cb9c8898a2268) called.
18:03:30.436 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:560] - User yusuf.test authenticated with method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
18:03:30.437 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161] - Returning control to profile handler
18:03:30.437 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.440 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.440 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177] - Redirecting user to profile handler at https://idp.kaplaninternational.com:443/idp/profile/SAML2/Redirect/SSO
18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedServletFilter:58] - Session available, storing on memcached...
18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0) called.
18:03:30.453 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...
18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36
18:03:30.461 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36) called.
18:03:30.472 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry at 5e834b36, expire 1800.
18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...
18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.
18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO
18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler
18:03:30.532 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.535 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry at 42a399e
18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:588] - Unbinding LoginContext
18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:614] - Expiring LoginContext cookie
18:03:30.537 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:328] - storageService.remove( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:625] - Removed LoginContext, with key f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6, from StorageService partition loginContexts
18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:172] - Incoming request contains a login context and indicates principal was authenticated, processing second leg of request
18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.547 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.547 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.548 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth, looking up configuration based on metadata groups.
18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth
18:03:30.551 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth. Using default relying party configuration.
18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://idp.kaplaninternational.com/idp/shibboleth
18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://idp.kaplaninternational.com/idp/shibboleth
18:03:30.559 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:99] - Filtering peer endpoints. Supported peer endpoint bindings: [urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact]
18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/ECP because its binding urn:oasis:names:tc:SAML:2.0:bindings:PAOS is not supported
18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/POST because its binding urn:oasis:names:tc:SAML:1.0:profiles:browser-post is not supported
18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/Artifact because its binding urn:oasis:names:tc:SAML:1.0:profiles:artifact-01 is not supported
18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69] - Selecting endpoint by ACS URL 'https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/POST' and protocol binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' for request '_e5fc1da29ac3349042a11f3584cf383b' from entity 'https://pass-mgt.kaplaninternational.com/shibboleth'
18:03:30.562 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:289] - Authentication failure, session missing during completion of profile handler
18:03:30.578 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.
18:03:30.582 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns null
18:03:30.582 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:360] - No login context in storage service
18:03:30.583 - DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display
Regards
Yusuf
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Yusuf Tran
Sent: 17 October 2013 18:41
To: Shib Users
Subject: RE: Upgrade to IDP 2.4.0 - Can not login
To confirm, I can test both versions side by side using the same browser and tools, I clear session and domain cookies each time.
All I do is amend my hosts file to point to the relevant IDP to test, so can confirm things work fine with IDP v 2.3.8, but if I change my hosts file with the upgraded IDP and check again than I get the error mentioned (after loggin in).
I'm actually testing by taking one of two nodes out of a load balanced pool.
Over the last few days I've diff'ed the setup folders and caught all changes and customisations, really it's just the SLO entries, updated packages, updated relying-party etc, meticulous care was taken to get the setup files ready!
This new cookie feature, is there a way we can make it behave like previous versions?
Regards
Yusuf
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 17 October 2013 18:10
To: Shib Users
Subject: Re: Upgrade to IDP 2.4.0 - Can not login
On 10/17/13 1:03 PM, "Yusuf Tran" <Yusuf.Tran at kaplan.com> wrote:
>Hi Guys,
>
>I¹m working on upgrading our IDP from version 2.3.8 to 2.4.0, I¹ve
>taken great care to merge in the customisations (ldap, memcache, custom
>login pages etc) but after installation I keep getting the warning
>mentioned on this page:
>
>
>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationCh
>ang
>es
>ŒCookie-Related Error Handling Change¹
>
>This is after I hit the login page and attempt a login.
>
>Can someone help point me in the right direction?
Only you can diagnose your own cookie environment. The error is extremely explicit to the case described. Your client isn't saving and returning the IdP session cookie. That's it.
All that's changed is what it does in that case. Your old environment either would have been sending out empty assertions, or you have a new cookie-related problem in your new one. Probably something hostname related perhaps.
-- Scott
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list