SP loop

John walloom at gmail.com
Wed Jun 14 03:40:09 EDT 2017


I have a wordpress site hosted on an apache.
Basically I want my sso users to be able to log on the wordpress.
With the help of the WordPress Shibboleth plugin it works correctly with my
IdP when the site is configured with an alias
url : https://site.com/wp
apache config :
Alias /wp/wp-content /var/lib/wordpress/wp-content
Alias /wp /usr/share/wordpress

But if I install the wordpress on /var/www/html and modify the
shibboleth2.xml with the new entityId https://site.com, I am able to get to
the sso page but my users are not redirected on the wordpress.
It seems I enter an infinite loop like this :

[14/Jun/2017:09:30:50 +0200] "GET /wp-login.php?action=shibboleth HTTP/1.1"
302 4009 "https://site.com/wp-login.php"
[14/Jun/2017:09:30:50 +0200] "GET
/Shibboleth.sso/Login?target=https%3A%2F%2Fsite.com%2Fwp-login.php%3Faction%3Dshibboleth
HTTP/1.1" 302 1906 "https://site.com/wp-login.php"
[14/Jun/2017:09:31:05 +0200] "POST /Shibboleth.sso/SAML2/POST HTTP/1.1" 302
1083 "https://siteIdP.com/idp/profile/SAML2/Redirect/SSO"
[14/Jun/2017:09:31:05 +0200] "GET /wp-login.php?action=shibboleth HTTP/1.1"
302 573 "https://siteIdP.com/idp/profile/SAML2/Redirect/SSO"
[14/Jun/2017:09:31:05 +0200] "GET
/Shibboleth.sso/Login?target=https%3A%2F%2Fsite.com%2Fwp-login.php%3Faction%3Dshibboleth
HTTP/1.1" 302 1898 "https://siteIdP.com/idp/profile/SAML2/Redirect/SSO"
[14/Jun/2017:09:31:06 +0200] "POST /Shibboleth.sso/SAML2/POST HTTP/1.1" 302
945 "https://siteIdP.com/idp/profile/SAML2/Redirect/SSO"

My configuration :
Debian 8
Apache/2.4.10
Shibboleth 2.6.0
PHP 5.6.30
Wordpress 4.8

I looked everywhere on my server for an error without finding anything, any
idea ?
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170614/0aa6993e/attachment.html>


More information about the users mailing list