[EXTERNAL] Re: Logon is looping after apparent successful authentication.

Fri Jun 1 20:30:56 EDT 2018

Interesting, I believe they are load balancing multiple IdP servers behind a LB, are you saying the IdP changed an IP address?  Note the IP addresses and timestamps below...  Those within the same minute are, of course, the same login attempt....

2018-06-01 19:24:05 INFO Shibboleth.SessionCache [3]: new session created: ID (_92085e8ccf790e5f7646ef58878446d8) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.3.197)
2018-06-01 19:24:05 INFO Shibboleth.SessionCache [4]: removed session (_92085e8ccf790e5f7646ef58878446d8)
2018-06-01 19:24:07 INFO Shibboleth.SessionCache [1]: new session created: ID (_6b8bdc09d01b11e21b75427b68a5e713) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.3.168)
2018-06-01 19:24:07 INFO Shibboleth.SessionCache [2]: removed session (_6b8bdc09d01b11e21b75427b68a5e713)
2018-06-01 19:24:08 INFO Shibboleth.SessionCache [3]: new session created: ID (_976031c307ebce747c851d1dc07173ad) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.2.221)
2018-06-01 19:24:08 INFO Shibboleth.SessionCache [4]: removed session (_976031c307ebce747c851d1dc07173ad)
2018-06-01 19:24:09 INFO Shibboleth.SessionCache [3]: new session created: ID (_53ac1bab9c3efca559d3f5ff7b81dcce) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.3.197)
2018-06-01 19:24:09 INFO Shibboleth.SessionCache [1]: removed session (_53ac1bab9c3efca559d3f5ff7b81dcce)

2018-06-01 20:21:13 INFO Shibboleth.SessionCache [1]: new session created: ID (_00e41e542ef70a86e8272d523b79eaa8) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.1.52)
2018-06-01 20:21:13 INFO Shibboleth.SessionCache [2]: removed session (_00e41e542ef70a86e8272d523b79eaa8)
2018-06-01 20:21:15 INFO Shibboleth.SessionCache [3]: new session created: ID (_b38fba3119e04194e24e063d252b58f2) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.1.77)
2018-06-01 20:21:15 INFO Shibboleth.SessionCache [4]: removed session (_b38fba3119e04194e24e063d252b58f2)
2018-06-01 20:21:16 INFO Shibboleth.SessionCache [1]: new session created: ID (_c90112f37dbecbdd0db67d57b3e9933d) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.1.158)
2018-06-01 20:21:16 INFO Shibboleth.SessionCache [2]: removed session (_c90112f37dbecbdd0db67d57b3e9933d)
2018-06-01 20:21:17 INFO Shibboleth.SessionCache [3]: new session created: ID (_3d1516f52aa8b605a7abe79350b99192) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.1.97)
2018-06-01 20:21:17 INFO Shibboleth.SessionCache [4]: removed session (_3d1516f52aa8b605a7abe79350b99192)
2018-06-01 20:21:19 INFO Shibboleth.SessionCache [1]: new session created: ID (_4cd8d294c82fe94b574ec6afaeed42cd) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.2.178)
2018-06-01 20:21:19 INFO Shibboleth.SessionCache [2]: removed session (_4cd8d294c82fe94b574ec6afaeed42cd)
2018-06-01 20:21:21 INFO Shibboleth.SessionCache [3]: new session created: ID (_56f2376e9b216b7eb36f4f5f0c7c2bd5) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.1.118)
2018-06-01 20:21:21 INFO Shibboleth.SessionCache [4]: removed session (_56f2376e9b216b7eb36f4f5f0c7c2bd5)
2018-06-01 20:21:22 INFO Shibboleth.SessionCache [1]: new session created: ID (_7f98aac672ba0c80961846a19d6a9d5c) IdP (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.3.164)
2018-06-01 20:21:22 INFO Shibboleth.SessionCache [2]: removed session (_7f98aac672ba0c80961846a19d6a9d5c)

D

Dennis O'Quinn | EDW Infrastructure Engineering | NAE115H @ 2250 MTC
The Home Depot | Marietta Technology Center | 2250 Newmarket Parkway | Marietta, GA  30067
M: Direct: 470.689.4513 | Cell: 470.658.1183 | Internal: 24513
e: doq at homedepot.com

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Friday, June 1, 2018 7:50 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: [EXTERNAL] Re: Logon is looping after apparent successful authentication.

> 2018-06-01 19:24:09 INFO Shibboleth.SessionCache [3]: new session created: ID (_53ac1bab9c3efca559d3f5ff7b81dcce) IdP
> (https://devsaml.homedepot.com) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (130.211.3.197)

> 2018-06-01 19:24:09 INFO Shibboleth.SessionCache [1]: removed session
> (_53ac1bab9c3efca559d3f5ff7b81dcce)

That's deeply suspicious. It screams "IP address change" so native.log should explain why it's asking to invalidate the session it literally just created a millisecond before.

That isn't consistent with a cookie problem and the only thing it is consistent with is client addresses changing.

-- Scott

--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=MtgQEAMQGqekjTjiAhkudQ&r=mn6DeBt1nj8Oqx06pdIK0_n5EfK6FeVHgdjBNpchyro&m=SqcPdMrNrFMeEOvVTT5OzwTHd-TgMXlTStAyv2MYlDw&s=wyBtDkVUc8LQcEkFHs_CiQVApYFGAYfNRoXVgUcHZ5Y&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

________________________________

The information in this Internet Email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this Email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this Email are subject to the terms and conditions expressed in any applicable governing The Home Depot terms of business or client engagement letter. The Home Depot disclaims all responsibility and liability for the accuracy and content of this attachment and for any damages or losses arising from any inaccuracies, errors, viruses, e.g., worms, trojan horses, etc., or other items of a destructive nature, which may be contained in this attachment and shall not be liable for direct, indirect, consequential or special damages in connection with this e-mail message or its attachment.