logout errors

[Donald Lohr]

We have an SP that is landing on an error page when users chose their 
logout button. The web browser lands on the vendors 
.../Shibboleth.sso/Logout page for a few seconds and displays:

---------
*Shibboleth Authentication Request*

You are automatically being redirected to the authentication service. If 
your browser appears to be hung up after 15-20 seconds, try reloading 
the page before contacting the technical support staff in charge of the 
authentication service you are trying to access.

*Redirecting...*
---------

Then after a few seconds, the web browser lands on an error page 
generated by our IdP that states:

---------
*Web Login Service - Error*

An error occurred: SessionNotFound
---------

The url showing this SessionNotFound message is 
.../idp/profile/SAML2/POST/SLO


Using the Firefox SAML Tracer, at this point on the HTTP tab, is the 
following error:

       "responseStatus": 500,
       "responseStatusText": "HTTP/1.1 500 Server Error",


1) What's the above telling me?

2) Looking in our logs I see the following "around the time" of a logout 
of this SP, but there is so much other stuff in the logs (we are NOT 
DEBUG logging). Will bumping up logging tell me which SP is generating 
these:

2021-04-14 17:02:17,922 - ERROR 
[org.springframework.webflow.execution.repository.NoSuchFlowExecutionException:76] 
-
org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: 
No flow execution could be found with key 'e4s1' -- perhaps this 
executing flow has ended or expired? This could happen if your users are 
relying on browser history (typically via the back button) that 
references ended flows.
         at 
org.springframework.webflow.execution.repository.support.AbstractFlowExecutionRepository.getConversation(AbstractFlowExecutionRepository.java:172)
Caused by: 
org.springframework.webflow.conversation.NoSuchConversationException: No 
conversation could be found with id '4' -- perhaps this conversation has 
ended?
         at 
org.springframework.webflow.conversation.impl.ConversationContainer.getConversation(ConversationContainer.java:126)

2021-04-14 17:02:44,636 - INFO 
[net.shibboleth.idp.session.impl.ProcessLogout:196] - Profile Action 
ProcessLogout: No active session found matching current request

2021-04-14 17:02:44,671 - INFO [Shibboleth-Audit.Logout:275] - 
20210414T210244Z||||http://shibboleth.net/ns/profiles/logout||||||||


Thanks,
Don



-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210414/a21defd0/attachment.htm>