NoSuchFlowExecutionException, e1s1

[W.Siebert]

Hello,

since three weeks I evaluate IDP3 for use in our company for federation with
partners.
Prior to that I made good experiences with Shibboleth 2.
After installing IDP 3.4.3 I'm trying to federate a test application, Apache
2.4 with Shibboleth Service Provider 3.
I can use SP3 with Schib2, but not with IDP3.
When I'm trying to access to my SP I get: " Web Login Service - Stale
Request. You may be seeing this page because you used the Back button while
browsing a secure web site or application.."
I have tried all of the possible combination of configs and metadata,
without success, unfortunately.

I test temporarily without SSL to allow sniffs, hope is not a blocker? 
I use a jetty-distribution-9.3.25 with IDP 3.4.3 and as SP
shibboleth-3.0.3-1.1.x86_64

Platform: CentOS 7.6

Coockies enabled, Browser files, history deleted

Log:

2019-02-28 18:03:21,685 - 10.11.11.1 - DEBUG
[org.springframework.webflow.engine.Transition:231] - Completed transition
execution.  As a result, the new state is 'DisplayUsernamePasswordPage' in
flow 'authn/Password'
2019-02-28 18:03:21,685 - 10.11.11.1 - DEBUG
[org.springframework.webflow.engine.Transition:231] - Completed transition
execution.  As a result, the new state is 'DisplayUsernamePasswordPage' in
flow 'authn/Password'
2019-02-28 18:03:21,686 - 10.11.11.1 - DEBUG
[org.springframework.webflow.conversation.impl.SessionBindingConversationMan
ager:75] - Locking conversation 1
2019-02-28 18:03:21,686 - 10.11.11.1 - DEBUG
[org.springframework.webflow.execution.repository.impl.DefaultFlowExecutionR
epository:121] - Putting flow execution '[FlowExecutionImpl at 47813d47 flow =
'SAML2/Redirect/SSO', flowSessions = list[[FlowSessionImpl at 6641a847 flow =
'SAML2/Redirect/SSO', state = 'DoAuthenticationSubflow', scope =
map[[empty]]], [FlowSessionImpl at 63e9dc04 flow = 'authn', state =
'CallAuthenticationFlow', scope = map['calledAsSubflow' -> true,
'calledAsExtendedFlow' -> [null]]], [FlowSessionImpl at 55d7a565 flow =
'authn/Password', state = 'DisplayUsernamePasswordPage', scope =
map['calledAsSubflow' -> true, 'viewScope' -> map[[empty]],
'calledAsExtendedFlow' -> [null], 'thisFlow' ->
AuthenticationFlowDescriptor{flowId=authn/Password, supportsPassive=true,
supportsForcedAuthentication=true, lifetime=3600000,
inactivityTimeout=1800000}]]]]' into repository
2019-02-28 18:03:21,686 - 10.11.11.1 - DEBUG
[org.springframework.webflow.execution.repository.impl.DefaultFlowExecutionR
epository:128] - Adding snapshot to group with id 1
2019-02-28 18:03:21,687 - 10.11.11.1 - DEBUG
[org.springframework.webflow.conversation.impl.SessionBindingConversationMan
ager:86] - Putting conversation attribute 'scope' with value
map['opensamlProfileRequestContext' ->
org.opensaml.profile.context.ProfileRequestContext at 1bf2c19d, 'flashScope' ->
map['messagesMemento' -> map[[null] -> list[[empty]]]]]
2019-02-28 18:03:21,687 - 10.11.11.1 - DEBUG
[org.springframework.webflow.conversation.impl.SessionBindingConversationMan
ager:107] - Unlocking conversation 1
2019-02-28 18:03:21,687 - 10.11.11.1 - DEBUG
[org.springframework.webflow.mvc.servlet.FlowHandlerAdapter:464] - Sending
flow execution redirect to '/idp/profile/SAML2/Redirect/SSO?execution=e1s1'
2019-02-28 18:03:21,688 - 10.11.11.1 - DEBUG
[org.springframework.web.servlet.DispatcherServlet:1048] - Null ModelAndView
returned to DispatcherServlet with name 'idp': assuming HandlerAdapter
completed request handling
2019-02-28 18:03:21,688 - 10.11.11.1 - DEBUG
[org.springframework.web.servlet.DispatcherServlet:1000] - Successfully
completed request
2019-02-28 18:03:21,699 - 10.11.11.1 - DEBUG
[org.springframework.web.servlet.DispatcherServlet:869] - DispatcherServlet
with name 'idp' processing GET request for [/idp/profile/SAML2/Redirect/SSO]
2019-02-28 18:03:21,700 - 10.11.11.1 - DEBUG
[org.springframework.webflow.mvc.servlet.FlowHandlerMapping:108] - Mapping
request with URI '/idp/profile/SAML2/Redirect/SSO' to flow with id
'SAML2/Redirect/SSO'
2019-02-28 18:03:21,700 - 10.11.11.1 - DEBUG
[org.springframework.web.servlet.DispatcherServlet:955] - Last-Modified
value for [/idp/profile/SAML2/Redirect/SSO] is: -1
2019-02-28 18:03:21,700 - 10.11.11.1 - DEBUG
[org.springframework.webflow.executor.FlowExecutorImpl:161] - Resuming flow
execution with key 'e1s1
2019-02-28 18:03:21,701 - 10.11.11.1 - ERROR
[org.springframework.webflow.execution.repository.NoSuchFlowExecutionExcepti
on:76] -
org.springframework.webflow.execution.repository.NoSuchFlowExecutionExceptio
n: No flow execution could be found with key 'e1s1' -- perhaps this
executing flow has ended or expired? This could happen if your users are
relying on browser history (typically via the back button) that references
ended flows.
        at
org.springframework.webflow.execution.repository.support.AbstractFlowExecuti
onRepository.getConversation(AbstractFlowExecutionRepository.java:172)
Caused by:
org.springframework.webflow.conversation.NoSuchConversationException: No
conversation could be found with id '1' -- perhaps this conversation has
ended?
        at
org.springframework.webflow.conversation.impl.ConversationContainer.getConve
rsation(ConversationContainer.java:126)
2019-02-28 18:03:21,702 - 10.11.11.1 - WARN
[net.shibboleth.ext.spring.error.ExtendedMappingExceptionResolver:136] -
Resolved
[org.springframework.webflow.execution.repository.NoSuchFlowExecutionExcepti
on: No flow execution could be found with key 'e1s1' -- perhaps this
executing flow has ended or expired? This could happen if your users are
relying on browser history (typically via the back button) that references
ended flows.] to ModelAndView: reference to view with name 'error'; model is
{exception=org.springframework.webflow.execution.repository.NoSuchFlowExecut
ionException: No flow execution could be found with key 'e1s1' -- perhaps
this executing flow has ended or expired? This could happen if your users
are relying on browser history (typically via the back button) that
references ended flows., request=Request(GET
//shibo-idp-01.test.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1)@3cd12
ad2, encoder=class net.shibboleth.utilities.java.support.codec.HTMLEncoder,
springContext=Root WebApplicationContext: startup date [Thu Feb 28 15:46:34
CET 2019]; root of context hierarchy}
2019-02-28 18:03:21,702 - 10.11.11.1 - DEBUG
[org.springframework.web.servlet.DispatcherServlet:1237] - Handler execution
resulted in exception - forwarding to resolved error view: ModelAndView:
reference to view with name 'error'; model is
{exception=org.springframework.webflow.execution.repository.NoSuchFlowExecut
ionException: No flow execution could be found with key 'e1s1' -- perhaps
this executing flow has ended or expired? This could happen if your users
are relying on browser history (typically via the back button) that
references ended flows., request=Request(GET
//shibo-idp-01.test.edu/idp/profile/SAML2/Redirect/SSO?execution=e1s1)@3cd12
ad2, encoder=class net.shibboleth.utilities.java.support.codec.HTMLEncoder,
springContext=Root WebApplicationContext: startup date [Thu Feb 28 15:46:34
CET 2019]; root of context hierarchy}
org.springframework.webflow.execution.repository.NoSuchFlowExecutionExceptio
n: No flow execution could be found with key 'e1s1' -- perhaps this
executing flow has ended or expired? This could happen if your users are
relying on browser history (typically via the back button) that references
ended flows.
        at
org.springframework.webflow.execution.repository.support.AbstractFlowExecuti
onRepository.getConversation(AbstractFlowExecutionRepository.java:172)
Caused by:
org.springframework.webflow.conversation.NoSuchConversationException: No
conversation could be found with id '1' -- perhaps this conversation has
ended?
        at
org.springframework.webflow.conversation.impl.ConversationContainer.getConve
rsation(ConversationContainer.java:126)


Could you help me please, may be a hint

Thanks in advance and best regards
Walt


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190228/36924f13/attachment.html>