Single logout not working

[rahul]

Hi

I am have setup shiboboleth IDP with my application acting as SP. First I am
trying to test if IDP and SP work together for this I have disabled signing
in the SP (SP makes non signed request to IDP).

Now when the user hits my application URL, the SP is redirecting the user to
IDP and IDP is able to authenticate the user and the user is able to login
to the SP application. But the logout is not working fine. When user hits
the logout in the SP application, the logout request is sent from the SP to
IDP and Idp responds back the the following

<?xml version="1.0" encoding="UTF-8"?><saml2p:LogoutResponse
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
Destination="http://mdlptp59:7001/ETF/SloCallbackServlet"
ID="_74b585b5bb4cbe18a22d805899368c23"
InResponseTo="eipheempiokmmjmhpdgngefkinpmpeeiclpblbjj"
IssueInstant="2014-12-09T12:33:20.921Z" Version="2.0"><saml2:Issuer
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://com.mdlptp59.net:8443/idp/shibboleth</saml2:Issuer><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ds:Reference
URI="#_74b585b5bb4cbe18a22d805899368c23"><ds:Transforms><ds:Transform
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>mthWt6PafQOa58OP/KXUkwepnEA=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>XYInT8YToEeQ+7KcJMBDobqn9J4VyoMyGQk+NlQtzkEJqRLfUvT7844ub/aUSlk91tAYfO6Gu2QtL0VKMoFoTK8HgxcpP1lMHxsFwDC9npopi9cyzYR8Cq7mlLoXHbNe1ng/tu3FG8fbpc49GtHJNAnyXW/3QZUM0CG7xDPMz4nYiIeQ0JEmqPwjcmzqN2qZMnt6jDaXm3fHt7GuR1wTxBFdDZh23weYlusLTnrPbxNVpi59ZtlpygYSWKN1/RLQybIQoVVnRtkJNRPfRbtXmessN8ueD1JEE8bxW9bFjuYSH+SXi3oLXsxRgGK2gvMASfd84Ol1uf0I6oIjAKAuHA==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIDLDCCAhSgAwIBAgIVAKW/8HBSu3so3jRIp9GofBAyetLkMA0GCSqGSIb3DQEBBQUAMBsxGTAX
BgNVBAMTEGNvbS5tZGxwdHA1OS5uZXQwHhcNMTQxMjAxMDk1OTI5WhcNMzQxMjAxMDk1OTI5WjAb
MRkwFwYDVQQDExBjb20ubWRscHRwNTkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWu9JJaEqNrXKAEMbDY5yw4N8Ao3lv26m1cCPlA68peM9MpjuKlEWemxNneSgAWUHCiWlXUL
WA/FhxXDu77Rry9juNeXDORWM7Ec+xNaVIP6cUKp9PFMUHvtU57xFySPJGyUjgJnr4mgL4cfIA7W
RJGKmCJMW0VGS4ynnUXyiDWdltdNCWM8YYw/92670RAnzXn3Yq6RXqeqwqGIWOSS7BfEV0tzewRX
AWVGkWYA3oKVdTyVVDZmNX1V7XKQ/NK9jsk8Ni8cpjcnEwX2CGDMn4YY7/sTyGfhVZiqMRMpQhf5
hpTzKPUnYh/zCSjuY5g/mnkf1aLNuVk6dyhopqKWRwIDAQABo2cwZTBEBgNVHREEPTA7ghBjb20u
bWRscHRwNTkubmV0hidodHRwczovL2NvbS5tZGxwdHA1OS5uZXQvaWRwL3NoaWJib2xldGgwHQYD
VR0OBBYEFG16vasn/vwaN/W2qvVh9WHY78M3MA0GCSqGSIb3DQEBBQUAA4IBAQBmmbKLsvkIvExk
O66P5s+SQIVFz+g5egy0dRYAR6hkei9MrvN3sivQBCzfqG2D53K49ntl0opWzFnpy7yxGF3yrH1U
QLSkDQg3ztfo2adHVzwv0npwyxVs2gL19Q6zeS+PxcIrkeuWsuRtzQelBgM0at+YeXoNqhd2cfbk
c6hcSi+jvzuARqTo0tlcPIeUhNHKTSqnuS82l4WyvXi7bm4elXCXNzZkVi0H/O/lpUG3G99ku9fX
cAckIhhDXvI3XM++IsAM5Iu2hpn8PBc8CxZdugqGCCsw3tTPahUaWl6KQ/YuSisirJFSxSXBJZAu
2ezSzusU3U7NaMkRwwOWwxFd</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2p:Status><saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Requester"><saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal"/></saml2p:StatusCode></saml2p:Status></saml2p:LogoutResponse>


Because IDP is responding back with the following status code the logout is
failing.

urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal

Can any one tell me what am I missing in the configuration and how to
resolve this issue



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Single-logout-not-working-tp7609848.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.