[EXTERNAL] Re: Logon is looping after apparent successful authentication.

[Cantor, Scott]

> RE: my comments;  I was noting that the IP Addr of the IdP (devsaml....) was
> different for each of those sessions.

No, that's the client's address and it shouldn't be changing if you have one client at a time testing.

  I have no idea why the SP (?) is having a
> problem and attempting to open those sessions.  I do not see anything of
> interest in the shibd/shibd_warn logs and nothing is being posted to the native
> SP logs in /var/log/shibboleth-www...

That's impossible, so I imagine you have permission errors preventing Apache from getting anything into the log. The Apache log might have some of the information needed.

> One thing of interest I see in the transaction log is that it is 'caching the
> following attributes with session (ID:...) for( applicationId: default)'...  but, it
> does not list any attributes...

Then you are getting, or mapping in, no attributes. Doesn't cause a loop.

> Again, any guidance would be greatly appreciated...

I told you, I think it's the address changing, invalidating the messages. I don't think it's a cookie issue, the log shows it removing a session that it could only have identified by accessing the cookie in the first place.

-- Scott