Shib SP 3.0 cause iis app pool crash

Boni, Simone sboni at ao.pr.it
Wed Oct 16 04:07:12 EDT 2019


Hi, i've configured a SP to test SSO integration against ADFS.
Shibboleth is running fine and SAML request against ADFS is ok but, on redirect to my "secure" website, IIS default app pool crash. I've raised do DEBUG all logs (native, shibd and console) so i can see the correct SAML message exchange, correct attribute mapping but i get this trace:

2019-10-16 09:39:45 DEBUG Shibboleth.AttributeDecoder.String [1] [default]: decoding SimpleAttribute (vat) from SAML 2 Attribute (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier) with 1 value(s)
2019-10-16 09:39:45 DEBUG Shibboleth.AttributeFilter [1] [default]: filtering 1 attribute(s) from (http://federation.ao.pr.it/adfs/services/trust)
2019-10-16 09:39:45 WARN Shibboleth.AttributeFilter [1] [default]: no filter policies were loaded, filtering out all attributes from (http://federation.ao.pr.it/adfs/services/trust)
2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: creating new session
2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: storing new session...
2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: inserted record (session) in context (_590f94575826613a452581c40dfa1821) with expiration (1571215185)
2019-10-16 09:39:45 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_590f94575826613a452581c40dfa1821) IdP (http://federation.ao.pr.it/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (::1)
2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: deleted record (c482ab63d00ed00f9804c5b4acbf8b6738d3de2994418cbab6ddef41413514bf) in context (RelayState)
2019-10-16 09:39:45 DEBUG Shibboleth.SSO.SAML2 [1] [default]: ACS returning via redirect to: https://sia-shibtest/secure/
2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)
2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)
2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (touch::StorageService::SessionCache)
2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)
2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: error reading size of input message
2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: failed socket call (unknown), result (0): No error
2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: I/O failure processing request on socket (472)

I highligth a suspected row... why Storage Service delete the record? I think that this deletion cause next errors, but i don't know why!
Am I missing something?

Transaction log report only AuthnRequest and Login transactions...

Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191016/72330011/attachment.html>


More information about the users mailing list