Stale Request error

Goebel, Brent Brent.Goebel at utdallas.edu
Thu Oct 19 17:35:26 EDT 2017


Hello all,

I am working on a configuration and ran into the following issue. The SP is on our relying party list since they do not support certificate for encryption.  When going to the SP's URL and attempting to login, I get the "Web Login Service - Stale Request" page. I've provided the URL below. I looked over the logs and found the 'invalid code lengths set' in regards to a java zip exception. Please see log entry below. This is the first I've seen this error. I couldn't find much information on this error. Anyone have experience with this error or can provide any other insight on what you see in the log below? It would be greatly appreciated.

Thank you,
Brent G. - UT Dallas

Stale Request URL: https://idp.utdallas.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=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%2BDQogIDxzYW1scDpOYW1lSURQb2xpY3kgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDp1bnNwZWNpZmllZCIgQWxsb3dDcmVhdGU9InRydWUiIC8%2BDQo8L3NhbWxwOkF1dGhuUmVxdWVzdD4%3D&RelayState=ftFlbFwiBukm9N6XOwZVavFmedoXUHyZZsd_mcc1iO-bco6PVRhL9aHy3H8ZBD0UYMLcSISvn-8A7SVVzpKwWA

Process logs:

2017-10-19 16:00:14,671 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:125] - Base64 decoding and inflating SAML message
2017-10-19 16:00:14,673 - ERROR [org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:157] - Error unmarshalling message from input stream
net.shibboleth.utilities.java.support.xml.XMLParserException: Unable to read data from input stream
        at net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicParserPool.java:251)
Caused by: java.util.zip.ZipException: invalid code lengths set
        at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164)
2017-10-19 16:00:14,676 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request
org.opensaml.messaging.decoder.MessageDecodingException: Error unmarshalling message from input stream
        at org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder.unmarshallMessage(BaseHttpServletRequestXMLMessageDecoder.java:158)
Caused by: net.shibboleth.utilities.java.support.xml.XMLParserException: Unable to read data from input stream
        at net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicParserPool.java:251)
Caused by: java.util.zip.ZipException: invalid code lengths set
        at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164)
2017-10-19 16:00:14,677 - WARN [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event occurred while processing the request: UnableToDecode
2017-10-19 16:00:14,677 - DEBUG [org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] - No SAMLBindingContext or binding URI available, error must be handled locally
2017-10-19 16:00:22,585 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:93] - Decoded RelayState: 1MWBrm0d-ovITfpaalafBFB_8wCrzaKP4GcPJRa72OEvWABAU9Wd0dxjUHJXxlndc5MdGLOSirOOH0HTm6VKgQ

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171019/03958047/attachment-0001.html>


More information about the users mailing list