MCB bug on failed logins?

[David Walker]

PeiQuan,

There's an issue tracker for the MCB on GitHub.  I've added a report for
this.

It seems a little funny to me in the first place that the
JAASLoginSubmodule returns to the MCB when you refresh the page, but
maybe there's a good reason for that.  I'll let Paul comment further.

David Walker


On 04/28/2015 02:45 PM, Ho, PeiQuan wrote:
>
> Hi,
>
>  
>
>                 I’m running some testing on the IDP with MCB.  I
> noticed that when I’m directed to the IDP login page and I simply
> don’t login and just refresh the page, the MCB regards this as an SSO
> session and tries to query LDAP  using a null user.  This fails of
> course.  But it also increments the failed login count.    The odd
> thing is in the logs, it shows that there was actually no previous
> session found, but the MCB still thinks it is SSO.  Is this the place
> to be reporting possible MCB bugs?
>
>  
>
> BTW, here’s what I see in the logs when I refresh the login page.
>
>  
>
> 14:33:19.675 - INFO [Shibboleth-Access:73] -
> 20150428T183319Z|130.64.204.178|<IDP>:443|/profile/SAML2/Redirect/SSO|
>
> 14:33:19.744 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginHandler:92]
> - MCBConfiguration bean =
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBConfiguration at 67c04226]
>
> 14:33:19.745 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginHandler:106]
> - Relying party = [<SP>]
>
> 14:33:19.745 - TRACE
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginHandler:248]
> - No session found. Previous Session Support setting = [true]
>
> 14:33:19.745 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginHandler:280]
> - Redirecting to https://<IDP>/idp/Authn/MCB
>
> 14:33:19.805 - TRACE
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:119]
> - =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
>
> 14:33:19.805 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:120]
> - Request received from [130.64.204.178]
>
> 14:33:19.805 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:128]
> - principal = [{MCBUsernamePrincipal}[principal]]
>
> 14:33:19.806 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:137]
> - Relying party = [<SP>]
>
> 14:33:19.806 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:170]
> - Performing authentication for request.
>
> 14:33:19.806 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:207]
> - Found 2nd leg of authentication, performing authentication.
>
> 14:33:19.807 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:806]
> - Getting requested contexts for relying party = [<SP>]
>
> 14:33:19.807 - DEBUG
> [edu.internet2.middleware.assurance.mcb.authn.provider.JAASLoginSubmodule:244]
> - Attempting to authenticate user null
>
> 14:33:19.819 - TRACE [edu.vt.middleware.ldap.jaas.LdapLoginModule:144]
> - Begin initialize
>
> .
>
> .
>
> .
>
>  
>
> Thanks,
>
> -PQ
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150428/834866be/attachment-0001.html>