Needing some assistance setting up a session initiator on a linux sp v 2.5.5

Ewing, Bill BEwing at utsystem.edu
Mon Sep 14 11:42:05 EDT 2015


The only changes we made from the working config was adding the idpHistory entry and replacing the <SSO> with the SessionInitiator. Is there any other relevant config that I could send that might help identify the issue?

Thanks,
Bill

<Sessions lifetime="28800" timeout="7200" 
                  checkAddress="false" idpHistory="true" handlerSSL="true" cookieProps="https">


            <!--
            Configures SSO for a default IdP. To allow for >1 IdP, remove
            entityID property and adjust discoveryURL to point to discovery service.
            (Set discoveryProtocol to "WAYF" for legacy Shibboleth WAYF support.)
            You can also override entityID on /Login query string, or in RequestMap/htaccess.
            -->

            <!-- SAML and local-only logout. -->
            <Logout>Local</Logout>

<!--Session initiator to allow for remembering of idp choice cookie while using custom DS page-->
<SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Default"  >
        <SessionInitiator type="Cookie" template="bindingTemplate.html" />
	<SessionInitiator type="SAML2" template="bindingTemplate.html" forceAuthn="true" />
        <SessionInitiator type="SAMLDS" template="bindingTemplate.html"
                      URL="https://zap-idp.shared.utsystem.edu/DS/index.html" />
</SessionInitiator>
            
            <!-- Extension service that generates "approximate" metadata based on SP configuration. -->
            <Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>

            <!-- Status reporting service. -->
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>

            <!-- Session diagnostic service. -->
            <Handler type="Session" Location="/Session" showAttributeValues="false"/>

            <!-- JSON feed of discovery information. -->
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        </Sessions>

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Sunday, September 13, 2015 12:31 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Needing some assistance setting up a session initiator on a linux sp v 2.5.5

On 9/11/15, 11:18 PM, "users on behalf of Paul Caskey" <users-bounces at shibboleth.net on behalf of pcaskey at internet2.edu> wrote:

>I looked at the config, didn't see anything wrong and, FWIW, it's been working until adding that SessionInitiator config.  I just wasn't sure what triggers that error, checked everything I knew to check.

In isolation it looked fine, but there's more to the picture than what I was shown, there's no other explanation for that error.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list