Needing some assistance setting up a session initiator on a linux sp v 2.5.5
Ewing, Bill
BEwing at utsystem.edu
Mon Sep 14 11:42:05 EDT 2015
The only changes we made from the working config was adding the idpHistory entry and replacing the <SSO> with the SessionInitiator. Is there any other relevant config that I could send that might help identify the issue?
Thanks,
Bill
<Sessions lifetime="28800" timeout="7200"
checkAddress="false" idpHistory="true" handlerSSL="true" cookieProps="https">
<!--
Configures SSO for a default IdP. To allow for >1 IdP, remove
entityID property and adjust discoveryURL to point to discovery service.
(Set discoveryProtocol to "WAYF" for legacy Shibboleth WAYF support.)
You can also override entityID on /Login query string, or in RequestMap/htaccess.
-->
<!-- SAML and local-only logout. -->
<Logout>Local</Logout>
<!--Session initiator to allow for remembering of idp choice cookie while using custom DS page-->
<SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Default" >
<SessionInitiator type="Cookie" template="bindingTemplate.html" />
<SessionInitiator type="SAML2" template="bindingTemplate.html" forceAuthn="true" />
<SessionInitiator type="SAMLDS" template="bindingTemplate.html"
URL="https://zap-idp.shared.utsystem.edu/DS/index.html" />
</SessionInitiator>
<!-- Extension service that generates "approximate" metadata based on SP configuration. -->
<Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>
<!-- Status reporting service. -->
<Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
<!-- Session diagnostic service. -->
<Handler type="Session" Location="/Session" showAttributeValues="false"/>
<!-- JSON feed of discovery information. -->
<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
</Sessions>
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Sunday, September 13, 2015 12:31 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Needing some assistance setting up a session initiator on a linux sp v 2.5.5
On 9/11/15, 11:18 PM, "users on behalf of Paul Caskey" <users-bounces at shibboleth.net on behalf of pcaskey at internet2.edu> wrote:
>I looked at the config, didn't see anything wrong and, FWIW, it's been working until adding that SessionInitiator config. I just wasn't sure what triggers that error, checked everything I knew to check.
In isolation it looked fine, but there's more to the picture than what I was shown, there's no other explanation for that error.
-- Scott
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list