Apache not picking up Shibboleth session variables

Kelsey, Bart Bart.Kelsey at osumc.edu
Tue Feb 16 14:05:04 EST 2016


Hey folks,

I'm having an issue where Apache doesn't seem to be picking up the session variables from shibd after the user logs in.  Please bear with me, as I inherited this server from someone else and I'm not an experienced user of shibd.  I'm running shibd with apache on Centos 6.

Here's what's going on:

When the user logs in through Shibboleth, everything appears to be working correctly on the Shibboleth server side.  The SAML being sent back from the server contains all of the relevant user information.  The transaction log shows this:

2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]: New session (ID: _be83541c049eeae52fcf2a976b58c98c) with (applicationId: default) for principal from (IdP: urn:mace:incommon:osu.edu) at (ClientAddress: 10.232.254.167) with (NameIdentifier: AEROHSDSF23UAOZUNKAWNNTISXIYOOBI4CRHE4C7UZSOWBFFHE2U4NBQHNRCUVTQK4TLAP7QQIZFVJWT4SRSDHKW2M2FX4PLQ7K5XUHDNSH4DR64KWOH4GSQYGJSBHYXTMACC4URE2YJPHZWC4EQEQKYBFULD6OQUVSLV6A3DW3QAFV4OHW2ZIGVK7PU62HTARH4YNBSOXNFDPR5QYRC5TPSPXMQAKIWYR34QMGI4EGHSRB5MOSQVHMBMMT2FKZU) using (Protocol: urn:oasis:names:tc:SAML:2.0:protocol) from (AssertionID: _f65936bc417cc2bdc0e0f6fa3ec1812c)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]: Cached the following attributes with session (ID: _be83541c049eeae52fcf2a976b58c98c) for (applicationId: default) {
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]:   mail (1 values)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]:   employeeNumber (1 values)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]:   eppn (1 values)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]:   sn (1 values)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]:   givenName (1 values)
2016-02-16 13:58:49 INFO Shibboleth-TRANSACTION [37]: }

...which would appear to indicate that a session is being created and the values I need are being saved.

Anyone know what to do about this issue?  If there are any logs and/or configuration files that would be useful for this, please let me know and I'll put them on pastebin.

Thanks,

Bart


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160216/7135366a/attachment-0001.html>


More information about the users mailing list