Stuck at /Shibboleth.sso/SAML2/POST
Kunal Shah
ks186033 at gmail.com
Thu Jun 28 02:48:28 EDT 2018
On Wed, Jun 27, 2018 at 02:16:53PM +0000, George Glessner wrote:
>The POST to the request url: http://george-oxygen.seitrraker.com:8080/Shibboleth.sso/SAML2/POST had a status of failed. When I exit out of my browser and open it back up and navigate to http://george-oxygen.seitrraker.com:8080/Shibboleth.sso/Status it loads up fine.
are you sure http://george-oxygen.seitrraker.com:8080/Shibboleth.sso/Status comes up fine? shibboleth2.xml you attached says it is allowed only from locahost.
you should have gotten forbidden error.
Something is not right. Either you are not using correct shibboleth2.xml or your SP metadata has problem.
>If I then enter in http://george-oxygen.seitrraker.com:8080/Shibboleth.sso/SAML2/POST I get the site can't be reached error, and then when going back to the status page I get the same error even though it was working fine just before I went to the POST page. It seems as though the POST page may be modifying something that is causing this?
>
web/app server and shibd.log should log error for this.
basic troubleshooting steps.
A) check metadata for accuracy
B) use fiddler or if you are using chrome, enable developer tools. Trace your request and see where it is getting stuck.
C) use exact time stamp to coorelate logs in web/app server, shibd and native log files.
I am mentioning web/app server because I am not sure why you are using port 8080.
For us to help you, more detailed information is needed.
-Kunal Shah
>-----Original Message-----
>From: Peter Schober <peter.schober at univie.ac.at>
>Sent: Wednesday, June 27, 2018 10:01 AM
>To: George Glessner <gglessner at serviceexpress.com>
>Subject: Re: Stuck at /Shibboleth.sso/SAML2/POST
>
>* George Glessner <gglessner at serviceexpress.com> [2018-06-27 15:47]:
>> When you say it looks like I'm trying to access something that doesn't
>> exist, are you talking about the /Shibboleth.sso/SAML2/POST?
>
>No, you wrote earlier:
>
>* George Glessner <gglessner at serviceexpress.com> [2018-06-26 19:44]:
>> I get an error saying that the site cannot be reached and that my
>> server IP address cannot be reached
>
>That's not a technical error report, of course, but if I had to guess (and I have, lacking evidence from your web server logs or HTTP status codes from the browser) to me that sounds like your browser cannot reach the server.
>
>-peter
>
>--
>For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
>To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list