TestShib unable to establish session?

Kevin Foote kpfoote at uoregon.edu
Thu Mar 3 12:12:02 EST 2016


agh.. 
fixing .. I’m doing some metadata processing in the back ground taking up memory .. 


--------
thanks
 kevin.foote

> On Mar 3, 2016, at 9:09 AM, Misagh Moayyed <mmoayyed at unicon.net> wrote:
> 
> I am witnessing what appears to be very strange behavior from TestShib’s SP. Looks like it has trouble establishing a session, or deals with a bad cookie or something. Logs below. 
> 
> Here are the synopses: 
> 
> 1. Punch in the entity id.
> 2. Authenticate once without any prior history. 
> 3. TestShib shows the Test IdP login page!
> 
> Close tab. Start a new browser tab. Start with:
> 
> 1. Punch in the entity id.
> 2. No authentication this time. Fine.
> 3. Testshib shows the Sample success page. 
> 
> Logs on the first attempt where it fails:
> 
> 
> 2016-03-03 11:45:52 DEBUG Shibboleth.SSO.SAML2 [65]: ACS returning via redirect to: https://sp.testshib.org/testing/sample.jsp
> 2016-03-03 11:45:53 DEBUG Shibboleth.Listener [70]: dispatching message (default::getHeaders::Application)
> 2016-03-03 11:45:53 DEBUG Shibboleth.Listener [70]: dispatching message (find::StorageService::SessionCache)
> 2016-03-03 11:45:53 DEBUG XMLTooling.StorageService [70]: updated expiration of valid records in context (_43be113af116620af1a489a8657a4497) to (1457027153)
> 2016-03-03 11:45:53 DEBUG Shibboleth.Listener [70]: dispatching message (remove::StorageService::SessionCache)
> 2016-03-03 11:45:53 INFO Shibboleth.SessionCache [70]: removed session (_43be113af116620af1a489a8657a4497)
> 2016-03-03 11:45:53 DEBUG Shibboleth.Listener [70]: dispatching message (default/TestShib::run::SAML2SI)
> 2016-03-03 11:45:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [70]: validating input
> 2016-03-03 11:45:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [70]: marshalling, deflating, base64-encoding the message
> 2016-03-03 11:45:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [70]: marshalled message:
> <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" Destination="https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO" ID="_2d6f22b2a881cd960eb58716c6eab043" IssueInstant="2016-03-03T16:45:53Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
> 2016-03-03 11:45:53 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [70]: message encoded, sending redirect to client
> 
> Logs on subsequent attempts:
> 
> 
> 2016-03-03 11:53:48 DEBUG Shibboleth.SSO.SAML2 [66]: ACS returning via redirect to: https://sp.testshib.org/testing/sample.jsp
> 2016-03-03 11:53:49 DEBUG Shibboleth.Listener [73]: dispatching message (default::getHeaders::Application)
> 2016-03-03 11:53:49 DEBUG Shibboleth.Listener [73]: dispatching message (find::StorageService::SessionCache)
> 2016-03-03 11:53:49 DEBUG XMLTooling.StorageService [73]: updated expiration of valid records in context (_a5918f786ba8f115c8390a90184d3ba5) to (1457027629)
> 2016-03-03 11:53:51 DEBUG Shibboleth.Listener [71]: dispatching message (default::getHeaders::Application)
> 2016-03-03 11:53:51 DEBUG Shibboleth.Listener [71]: dispatching message (find::StorageService::SessionCache)
> 2016-03-03 11:53:51 DEBUG XMLTooling.StorageService [71]: updated expiration of valid records in context (_a5918f786ba8f115c8390a90184d3ba5) to (1457027631)
> 2016-03-03 11:53:51 DEBUG Shibboleth.Listener [79]: dispatching message (default::getHeaders::Application)
> 2016-03-03 11:53:51 DEBUG Shibboleth.Listener [79]: dispatching message (find::StorageService::SessionCache)
> 2016-03-03 11:53:51 DEBUG XMLTooling.StorageService [79]: updated expiration of valid records in context (_a5918f786ba8f115c8390a90184d3ba5) to (1457027631)
> 
> -- 
> Misagh
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list