A non-proceed event occurred while processing the request: EndpointResolutionFailed
gloryer
ronghan_lin at foxitsoftware.cn
Tue Nov 19 03:57:24 EST 2019
the SP metadata.xml was
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
entityID="https://cas-docker.connectedpdf.com/cas/saml/5dca6a9d603d5c0b7d0f6323">
<md:SPSSODescriptor
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://cas-docker.connectedpdf.com/cas/login?client_name=FoxitSAMLClient&enterpriseId=5dca6a9d603d5c0b7d0f6323"
/>
</md:SPSSODescriptor>
</md:EntityDescriptor>
if Location=https://cas-docker.connectedpdf.com/cas/login, it rediret to
signin page successfully.
set
Location="https://cas-docker.connectedpdf.com/cas/login?client_name=FoxitSAMLClient&enterpriseId=5dca6a9d603d5c0b7d0f6323",
when redirect to idp,it was Web Login Service - Unable to Respond
the log was:
2019-11-19 08:36:07,190 - 10.203.18.81 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:99]
- Decoded RelayState: null
2019-11-19 08:36:07,193 - 10.203.18.81 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:131]
- Base64 decoding and inflating SAML message
2019-11-19 08:36:07,216 - 10.203.18.81 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:114]
- Decoded SAML message
2019-11-19 08:36:07,321 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:184]
- Metadata Resolver FilesystemMetadataResolver CAS: Resolved 1 candidates
via EntityIdCriterion: EntityIdCriterion
[id=https://cas-docker.connectedpdf.com/cas/saml/5dca6a9d603d5c0b7d0f6323]
2019-11-19 08:36:07,322 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:590] -
Metadata Resolver FilesystemMetadataResolver CAS: Attempting to filter
candidate EntityDescriptors via resolved Predicates
2019-11-19 08:36:07,324 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:612] -
Metadata Resolver FilesystemMetadataResolver CAS: After predicate filtering
1 EntityDescriptors remain
2019-11-19 08:36:07,324 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:266]
- Resolved 1 source EntityDescriptors
2019-11-19 08:36:07,328 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:277]
- Resolved 1 RoleDescriptor candidates via role criteria, performing
predicate filtering
2019-11-19 08:36:07,328 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:378]
- Attempting to filter candidate RoleDescriptors via resolved Predicates
2019-11-19 08:36:07,329 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:400]
- After predicate filtering 1 RoleDescriptors remain
2019-11-19 08:36:07,329 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:145] -
Message Handler:
org.opensaml.saml.common.messaging.context.SAMLMetadataContext added to
MessageContext as child of
org.opensaml.saml.common.messaging.context.SAMLPeerEntityContext
2019-11-19 08:36:07,339 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:158]
- Message Handler: Selecting default AttributeConsumingService, if any
2019-11-19 08:36:07,340 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.support.AttributeConsumingServiceSelector:186] -
Resolving AttributeConsumingService candidates from SPSSODescriptor
2019-11-19 08:36:07,340 - 10.203.18.81 - DEBUG
[org.opensaml.saml.metadata.support.AttributeConsumingServiceSelector:141] -
AttributeConsumingService candidate list was empty, can not select service
2019-11-19 08:36:07,341 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:167]
- Message Handler: No AttributeConsumingService selected
2019-11-19 08:36:07,706 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:157]
- Message Handler: Checking SAML message intended destination endpoint
against receiver endpoint
2019-11-19 08:36:07,707 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:190]
- Message Handler: Intended message destination endpoint:
https://idp.foxit.com/idp/profile/SAML2/Redirect/SSO
2019-11-19 08:36:07,708 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:191]
- Message Handler: Actual message receiver endpoint:
https://idp.foxit.com/idp/profile/SAML2/Redirect/SSO
2019-11-19 08:36:07,711 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler:204]
- Message Handler: SAML message intended destination endpoint matched
recipient endpoint
2019-11-19 08:36:07,720 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler:152]
- Message Handler: Evaluating message replay for message ID
'_3e3661d5c9920216ea9f72bbbcfb40c6', issue instant
'2019-11-19T08:36:05.939Z', entityID
'https://cas-docker.connectedpdf.com/cas/saml/5dca6a9d603d5c0b7d0f6323'
2019-11-19 08:36:07,739 - 10.203.18.81 - DEBUG
[org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:83]
- SPSSODescriptor for entity ID
'https://cas-docker.connectedpdf.com/cas/saml/5dca6a9d603d5c0b7d0f6323' does
not require AuthnRequests to be signed
2019-11-19 08:36:07,755 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler:103]
- Message Handler: SAML protocol message was not signed, skipping XML
signature processing
2019-11-19 08:36:07,768 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:149]
- Message Handler: Evaluating simple signature rule of type:
org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler
2019-11-19 08:36:07,769 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:158]
- Message Handler: HTTP request was not signed via simple signature
mechanism, skipping
2019-11-19 08:36:07,780 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:149]
- Message Handler: Evaluating simple signature rule of type:
org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler
2019-11-19 08:36:07,781 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.security.impl.BaseSAMLSimpleSignatureSecurityHandler:152]
- Message Handler: Handler can not handle this request, skipping
2019-11-19 08:36:07,835 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.AbstractEndpointResolver:220] - Endpoint
Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:
Returning 1 candidate endpoints of type
{urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService
2019-11-19 08:36:07,836 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.impl.DefaultEndpointResolver:126] -
Endpoint Resolver
org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: Neither
candidate endpoint location
'https://cas-docker.connectedpdf.com/cas/login?client_name=FoxitSAMLClient&enterpriseId=5dca6a9d603d5c0b7d0f6323'
nor response location 'null' matched
'https://cas-docker.connectedpdf.com/cas/login'
2019-11-19 08:36:07,837 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.binding.AbstractEndpointResolver:130] - Endpoint
Resolver org.opensaml.saml.common.binding.impl.DefaultEndpointResolver: No
candidate endpoints met criteria
2019-11-19 08:36:07,837 - 10.203.18.81 - WARN
[net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:410]
- Profile Action PopulateBindingAndEndpointContexts: Unable to resolve
outbound message endpoint for relying party
'https://cas-docker.connectedpdf.com/cas/saml/5dca6a9d603d5c0b7d0f6323':
EndpointCriterion
[type={urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService,
Binding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST,
Location=https://cas-docker.connectedpdf.com/cas/login, trusted=false]
2019-11-19 08:36:07,856 - 10.203.18.81 - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
occurred while processing the request: EndpointResolutionFailed
2019-11-19 08:36:07,857 - 10.203.18.81 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:143] - No
SAMLBindingContext or binding URI available, error must be handled locally
10.203.18.81 - - [19/Nov/2019:08:36:07 +0000] "GET
/idp/profile/SAML2/Redirect/SSO?SAMLRequest=jZJBb9wgEIXv%2FRWIuw3GXSdGa0fbrKKulDartdNDLxWGcYJqgws4Tf998W5WSi%2BrHgfevHn6ZtY3r%2BOAXsB5bU2Fs5RiBEZapc1ThR%2Fbu%2BQa39Qf1l6MA5v4Zg7P5gC%2FZvABbbwHF2LfrTV%2BHsE14F60hMfDfYWfQ5g8J0QKnygrf4JLpTUGZAA1qT4W4%2FJHBvukDUbbaKiNCMcU516tprS3rzoc1bEik7O9HoA0my%2F3jBxAaRcdSdM8YLTbVvhHDnlRZGoly5JRlhUgyv6KdV0n%2B%2B4jlUWUeT%2FDzvggTKgwo1mZZFmSlS295nnB6Sot8%2FI7Rntng5V2%2BKTNCcbsDLfCa8%2BNGMHzIPkSg7OU8u4k8vxz2%2B6T%2FUPTYvTtDJUtUCNm4%2FkJ42Wv6W0wrk%2FU%2BTGxe%2B9w2UCc94Lr%2F93C4kpWSopClKqgeQRIuytF%2ByJn%2BZq8z1Gfb%2BFrHLzb7u2g5R%2B0GQb7%2B9aBCFDh4GbA6M66UYTLUZcXrZL%2BKOXBCeM1mIBJ%2FTb035Or%2FwI%3D
HTTP/1.1" 400 1059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36"
10.203.18.81 - - [19/Nov/2019:08:36:08 +0000] "GET /idp/css/main.css
HTTP/1.1" 200 0
"https://idp.foxit.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=jZJBb9wgEIXv%2FRWIuw3GXSdGa0fbrKKulDartdNDLxWGcYJqgws4Tf998W5WSi%2BrHgfevHn6ZtY3r%2BOAXsB5bU2Fs5RiBEZapc1ThR%2Fbu%2BQa39Qf1l6MA5v4Zg7P5gC%2FZvABbbwHF2LfrTV%2BHsE14F60hMfDfYWfQ5g8J0QKnygrf4JLpTUGZAA1qT4W4%2FJHBvukDUbbaKiNCMcU516tprS3rzoc1bEik7O9HoA0my%2F3jBxAaRcdSdM8YLTbVvhHDnlRZGoly5JRlhUgyv6KdV0n%2B%2B4jlUWUeT%2FDzvggTKgwo1mZZFmSlS295nnB6Sot8%2FI7Rntng5V2%2BKTNCcbsDLfCa8%2BNGMHzIPkSg7OU8u4k8vxz2%2B6T%2FUPTYvTtDJUtUCNm4%2FkJ42Wv6W0wrk%2FU%2BTGxe%2B9w2UCc94Lr%2F93C4kpWSopClKqgeQRIuytF%2ByJn%2BZq8z1Gfb%2BFrHLzb7u2g5R%2B0GQb7%2B9aBCFDh4GbA6M66UYTLUZcXrZL%2BKOXBCeM1mIBJ%2FTb035Or%2FwI%3D"
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/76.0.3809.87 Safari/537.36"
10.203.18.81 - - [19/Nov/2019:08:36:08 +0000] "GET /idp/images/dummylogo.png
HTTP/1.1" 200 0
"https://idp.foxit.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=jZJBb9wgEIXv%2FRWIuw3GXSdGa0fbrKKulDartdNDLxWGcYJqgws4Tf998W5WSi%2BrHgfevHn6ZtY3r%2BOAXsB5bU2Fs5RiBEZapc1ThR%2Fbu%2BQa39Qf1l6MA5v4Zg7P5gC%2FZvABbbwHF2LfrTV%2BHsE14F60hMfDfYWfQ5g8J0QKnygrf4JLpTUGZAA1qT4W4%2FJHBvukDUbbaKiNCMcU516tprS3rzoc1bEik7O9HoA0my%2F3jBxAaRcdSdM8YLTbVvhHDnlRZGoly5JRlhUgyv6KdV0n%2B%2B4jlUWUeT%2FDzvggTKgwo1mZZFmSlS295nnB6Sot8%2FI7Rntng5V2%2BKTNCcbsDLfCa8%2BNGMHzIPkSg7OU8u4k8vxz2%2B6T%2FUPTYvTtDJUtUCNm4%2FkJ42Wv6W0wrk%2FU%2BTGxe%2B9w2UCc94Lr%2F93C4kpWSopClKqgeQRIuytF%2ByJn%2BZq8z1Gfb%2BFrHLzb7u2g5R%2B0GQb7%2B9aBCFDh4GbA6M66UYTLUZcXrZL%2BKOXBCeM1mIBJ%2FTb035Or%2FwI%3D"
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/76.0.3809.87 Safari/537.36"
Thanks in advance for the help,
lin
--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list