Shibboleth 2.5.3 SP looping after successful POST

[James W. Anderson]

I have an Apache site hosted in AWS on EC2, with an ELB with SSL termination in front, and the Shibboleth SP 2.5.3 protecting from the root down. The site loops indefinitely, and I can't understand why.

When I hit the site, Shibboleth returns an AuthnRequest and redirects me to the IDP, the IDP authenticates me, my browser POSTs the assertion back to the ACS URL on the site, the POST returns a 302 and redirects me to the root of the site. At this point, Shibboleth returns another AuthnRequest and the process begins all over again.

I have handlerSSL set to false, cookieProps set to https, and Apache has the proper canonical name for the domain. I see in the Shibboleth log file that the POST is creating the session, so why am I stuck in a loop here?




[cid:image001.png at 01D01537.F005A230]


James W. Anderson
Cloud Infrastructure Architect
The Coca-Cola Company
404.676.4914 Office
770.653.1033 Mobile
404.598.4914 Fax
jamesanderson at coca-cola.com<mailto:jamesanderson at coca-cola.com>





________________________________

CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.

________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161021/e86f6baa/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 12779 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20161021/e86f6baa/attachment-0001.png>