Shib SP 3.0 cause iis app pool crash
Rod Widdowson
rdw at steadingsoftware.com
Wed Oct 16 04:58:59 EDT 2019
If IIS is crashing you need to look at the native log. This is most likely in the event viewer log
Sent from my iPhone
> On 16 Oct 2019, at 09:07, Boni, Simone <sboni at ao.pr.it> wrote:
>
>
> Hi, i’ve configured a SP to test SSO integration against ADFS.
> Shibboleth is running fine and SAML request against ADFS is ok but, on redirect to my “secure” website, IIS default app pool crash. I’ve raised do DEBUG all logs (native, shibd and console) so i can see the correct SAML message exchange, correct attribute mapping but i get this trace:
>
> 2019-10-16 09:39:45 DEBUG Shibboleth.AttributeDecoder.String [1] [default]: decoding SimpleAttribute (vat) from SAML 2 Attribute (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier) with 1 value(s)
> 2019-10-16 09:39:45 DEBUG Shibboleth.AttributeFilter [1] [default]: filtering 1 attribute(s) from (http://federation.ao.pr.it/adfs/services/trust)
> 2019-10-16 09:39:45 WARN Shibboleth.AttributeFilter [1] [default]: no filter policies were loaded, filtering out all attributes from (http://federation.ao.pr.it/adfs/services/trust)
> 2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: creating new session
> 2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: storing new session...
> 2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: inserted record (session) in context (_590f94575826613a452581c40dfa1821) with expiration (1571215185)
> 2019-10-16 09:39:45 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_590f94575826613a452581c40dfa1821) IdP (http://federation.ao.pr.it/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (::1)
> 2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: deleted record (c482ab63d00ed00f9804c5b4acbf8b6738d3de2994418cbab6ddef41413514bf) in context (RelayState)
> 2019-10-16 09:39:45 DEBUG Shibboleth.SSO.SAML2 [1] [default]: ACS returning via redirect to: https://sia-shibtest/secure/
> 2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)
> 2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)
> 2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (touch::StorageService::SessionCache)
> 2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)
> 2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: error reading size of input message
> 2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: failed socket call (unknown), result (0): No error
> 2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: I/O failure processing request on socket (472)
>
> I highligth a suspected row… why Storage Service delete the record? I think that this deletion cause next errors, but i don’t know why!
> Am I missing something?
>
> Transaction log report only AuthnRequest and Login transactions…
>
> Thanks.
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191016/ddfdaa16/attachment.html>
More information about the users
mailing list