New Shibboleth daemon on new server - user/wayf page just reloads over and over

[Cantor, Scott]

On 9/12/13 11:40 AM, "Ben Turner" <bturner at educause.edu> wrote:

>new environment that isn't working:
>https://new.educause.edu/Shibboleth.sso/DS?target=https%3A%2F%2Fnew.educau
>se.edu%2Fshib_login%2Fhome
>
>What we're seeing is the user reaches the user/wayf resource on
>new.educause.edu and they select an institution then it simply reloads
>the user/wayf page without any notice, error or warning.  I've confirmed
>that our incommon.xml file is writing correctly and we're not seeing
>anything in the logs for shibd.txt, native.txt, native_warn.txt or
>shibd_warn.txt pertaining to any interactions from end users.

The only thing that happened to pop out when I did a Live Headers trace is
that the return URL from your DS back to the SP's endpoint has an extra
ampersand in the URL. The query string looks like ?DS=1&&target=cookie..."

Note the extra & there.

I think it's having an issue parsing the query parameters perhaps and
causing it to fail to pick up the entityID, which then causes it to
trigger the request to the DS again.

The SP doesn't generate an invalid query string like that, at least not
that I've ever seen.

-- Scott