Shibboleth SP | Logout Intermittent Issues
Chug, Kshitij (NIH/CIT) [C]
kshitij.chug at nih.gov
Tue Mar 2 19:30:31 UTC 2021
Hi Nate,
Exactly at 3:23:41 - Logout was called (as per HAR files), I see SAML2LI, but I do not see " starting to marshal samlp:LogoutRequest" and then there is no " logout request."
2021-02-26 15:23:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://feddev.xyz.gov/Shibboleth.sso/SAML2/POST" Destination="https://idp.int.abc.gov/api/saml/auth2020" ForceAuthn="1" ID="_42361e79fc5d9091c96db3c66671244c" IssueInstant="2021-02-26T20:23:09Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://feddev.xyz.gov/FederationGateway</saml:Issuer><samlp:NameIDPolicy AllowCreate="1" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"/><samlp:RequestedAuthnContext><saml:AuthnContextClassRef xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://abc2.gov/ns/assurance/ial/1</saml:AuthnContextClassRef></samlp:RequestedAuthnContext></samlp:AuthnRequest>
2021-02-26 15:23:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: signing the message
2021-02-26 15:23:09 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: message encoded, sending redirect to client
2021-02-26 15:23:41 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)
2021-02-26 15:23:41 DEBUG Shibboleth.Listener [1] [default]: dispatching message (default/Logout::run::LocalLI)
2021-02-26 15:23:41 DEBUG Shibboleth.SessionCache [1] [default]: searching for session (_a528663ab43c148bcb72fde0b3191571)
2021-02-26 15:23:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (default/Login::run::SAML2SI)
2021-02-26 15:23:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: validating input
2021-02-26 15:23:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalling, deflating, base64-encoding the message
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshal samlp:AuthnRequest
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling saml:Issuer
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling samlp:NameIDPolicy
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling samlp:RequestedAuthnContext
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: starting to marshalling saml:AuthnContextClassRef
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: creating root element to marshall
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling namespace attributes for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: marshalling text and child elements for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject
2021-02-26 15:23:45 DEBUG XMLTooling.XMLObject [1] [default]: caching DOM for XMLObject (document is bound)
2021-02-26 15:23:45 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalled message:
-----Original Message-----
From: Chug, Kshitij (NIH/CIT) [C] via users <users at shibboleth.net>
Sent: Tuesday, March 2, 2021 1:45 PM
To: Nate Klingenstein <ndk at signet.id>; Shib Users <users at shibboleth.net>
Cc: Chug, Kshitij (NIH/CIT) [C] <kshitij.chug at nih.gov>
Subject: RE: Shibboleth SP | Logout Intermittent Issues
Thanks Nate for looking into this issue:
2021-02-28 16:53:10 DEBUG XMLTooling.StorageService [14] [default]: inserted record (session) in context (_b7da25c292ac8919557f0ab1b5525e1d) with expiration (1614550090)
2021-02-28 16:53:10 DEBUG XMLTooling.StorageService [14] [default]: updated record (1f0e1079-f355-4e5b-a547-24ca77388fac) in context (NameID) with expiration (1614550090)
2021-02-28 16:53:10 INFO Shibboleth.SessionCache [14] [default]: new session created: ID (_b7da25c292ac8919557f0ab1b5525e1d) IdP (https://idp.int.identitysandbox.gov/api/saml) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (10.180.47.201)
2021-02-28 16:53:10 DEBUG Shibboleth.SSO.SAML2 [14] [default]: ACS returning via redirect to: https://federationdev.nih.gov/ShibAuth/initiatelogin?target=https%253A%252F%252Fniaidcrmsval%252Eniaid%252Enih%252Egov%252FNCRMS%252FMain%252FAuthLoginGov%252Easpx
2021-02-28 16:53:10 DEBUG Shibboleth.Listener [14] [default]: dispatching message (find::StorageService::SessionCache)
2021-02-28 16:53:10 DEBUG XMLTooling.StorageService [14] [default]: updated expiration of valid records in context (_b7da25c292ac8919557f0ab1b5525e1d) to (1614550090)
2021-02-28 16:53:10 DEBUG Shibboleth.Listener [14] [default]: dispatching message (touch::StorageService::SessionCache)
2021-02-28 16:53:10 DEBUG XMLTooling.StorageService [14] [default]: updated expiration of valid records in context (_b7da25c292ac8919557f0ab1b5525e1d) to (1614550090)
2021-02-28 16:53:11 DEBUG Shibboleth.Listener [14] [default]: dispatching message (touch::StorageService::SessionCache)
2021-02-28 16:53:11 DEBUG XMLTooling.StorageService [14] [default]: updated expiration of valid records in context (_b7da25c292ac8919557f0ab1b5525e1d) to (1614550091)
2021-02-28 16:53:11 DEBUG Shibboleth.Listener [14] [default]: dispatching message (touch::StorageService::SessionCache)
2021-02-28 16:53:11 DEBUG XMLTooling.StorageService [14] [default]: updated expiration of valid records in context (_b7da25c292ac8919557f0ab1b5525e1d) to (1614550091)
2021-02-28 16:53:11 DEBUG Shibboleth.Listener [14] [default]: dispatching message (touch::StorageService::SessionCache)
2021-02-28 16:53:11 DEBUG XMLTooling.StorageService [14] [default]: updated expiration of valid records in context (_b7da25c292ac8919557f0ab1b5525e1d) to (1614550091)
2021-02-28 17:05:54 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage
2021-02-28 17:08:16 DEBUG Shibboleth.Listener [14] [default]: dispatching message (remove::StorageService::SessionCache)
2021-02-28 17:08:16 INFO Shibboleth.SessionCache [14] [default]: removed session (_b7da25c292ac8919557f0ab1b5525e1d)
2021-02-28 17:08:16 DEBUG Shibboleth.Listener [14] [default]: dispatching message (default/Logout::run::LocalLI)
2021-02-28 17:08:16 DEBUG Shibboleth.SessionCache [14] [default]: searching for session (_b7da25c292ac8919557f0ab1b5525e1d)
2021-02-28 17:20:52 INFO OpenSAML.MetadataProvider.XML : reloading remote resource...
Thanks again. Kshitij
-----Original Message-----
From: Nate Klingenstein <ndk at signet.id>
Sent: Monday, March 1, 2021 3:48 PM
To: Shib Users <users at shibboleth.net>
Cc: Chug, Kshitij (NIH/CIT) [C] <kshitij.chug at nih.gov>
Subject: RE: Shibboleth SP | Logout Intermittent Issues
Kshitij,
I'm not aware of anything wrong with the SAML Logout implementation in the SP. We'll need more information about the issue you're having and some logs capturing the intermittent issue to really be of any help to you.
Take care,
Nate.
--------
Signet, Inc.
The Art of Access ®
https://www.signet.id
-----Original message-----
From: Chug, Kshitij (NIH/CIT) [C] via users
Sent: Monday, March 1 2021, 1:45 pm
To: Shib Users
Cc: Chug, Kshitij (NIH/CIT) [C]
Subject: Shibboleth SP | Logout Intermittent Issues
Hi All,
We are seeing an intermittent issue.
Shibb SP does not initiate the Single Logout intermittently. Is there any known issue or can someone suggest some solution/configuration changes to avoid logout issues?
Thanks,
Kshitij Chug
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list