[EXTERNAL] RE: Server variables empty on IIS

[FONTVIELLE Thibault]

Hi Rod,

In the Windows Event Log Applications and Services ->  Shibboleth there is only one warning every time I restart the service :
Shibboleth.DEPRECATION : MetadataGenerator handler

Nothing special in Applications, System or Security.

Shibboleth logs during the last logon :
In shibd.log :
2024-09-24 17:47:02 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_ff4293c3c63c48f9dceffe16259598ee) IdP (http://adfs.example.org/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (1.2.3.4)

In transaction.log :
2024-09-24 17:47:02|Shibboleth-TRANSACTION.AuthnRequest|||http://adfs.example.org/adfs/services/trust||||||urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect||||||
2024-09-24 17:47:02|Shibboleth-TRANSACTION.Login|X000000|_ff4293c3c63c48f9dceffe16259598ee|http://adfs.example.org/adfs/services/trust|_8b6eb58f-518c-4b15-abf6-659f1b671f63|urn:federation:authentication:windows|2024-09-24T17:46:33|name(1)||urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST||urn:oasis:names:tc:SAML:2.0:status:Success|||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Edg/128.0.0.0|1.2.3.4


Changed logs to DEBUG, did another logon and this is part of the shibd.log :
2024-09-24 17:57:18 DEBUG Shibboleth.SSO.SAML2 [1] [default]: SSO profile processing completed successfully
2024-09-24 17:57:18 DEBUG Shibboleth.SSO.SAML2 [1] [default]: extracting pushed attributes...
2024-09-24 17:57:18 DEBUG Shibboleth.AttributeExtractor.XML [1] [default]: unable to extract attributes, unknown XML object type: samlp:Response
2024-09-24 17:57:18 DEBUG Shibboleth.AttributeExtractor.XML [1] [default]: unable to extract attributes, unknown XML object type: {urn:oasis:names:tc:SAML:2.0:assertion}AuthnStatement
2024-09-24 17:57:18 DEBUG Shibboleth.AttributeDecoder.String [1] [default]: decoding SimpleAttribute (name) from SAML 2 Attribute (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name) with 1 value(s)
2024-09-24 17:57:18 DEBUG Shibboleth.AttributeFilter [1] [default]: filtering 1 attribute(s) from (http://adfs.example.org/adfs/services/trust)
2024-09-24 17:57:18 DEBUG Shibboleth.AttributeFilter [1] [default]: applying filtering rule(s) for attribute (name) from (http://adfs.example.org/adfs/services/trust)
2024-09-24 17:57:18 DEBUG Shibboleth.SessionCache [1] [default]: creating new session
2024-09-24 17:57:18 DEBUG Shibboleth.SessionCache [1] [default]: storing new session...
2024-09-24 17:57:18 DEBUG XMLTooling.StorageService [1] [default]: inserted record (session) in context (_c4c2ec67a7e989d2757ed5e25d5b11bd) with expiration (1727197038)
2024-09-24 17:57:18 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_c4c2ec67a7e989d2757ed5e25d5b11bd) IdP (http://adfs.example.org/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (1.2.3.4)
2024-09-24 17:57:18 DEBUG XMLTooling.StorageService [1] [default]: deleted record (4daaa33a1479e24ef34eef97f4bf65f5b703a9358e7f55075639fcb4830084f2) in context (RelayState)
2024-09-24 17:57:18 DEBUG Shibboleth.SSO.SAML2 [1] [default]: ACS returning via redirect to: https://app.example.org/
2024-09-24 17:57:22 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)
2024-09-24 17:57:22 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_c4c2ec67a7e989d2757ed5e25d5b11bd) to (1727197042)

Thibault



INTERNE

De : users <users-bounces at shibboleth.net> De la part de Rod Widdowson
Envoyé : mardi 24 septembre 2024 14:48
À : 'Shib Users' <users at shibboleth.net>
Objet : [EXTERNAL] RE: Server variables empty on IIS

What do your logs say (remembering that they may well be in the event viewer)?

Ce message est confidentiel. Son contenu ne represente en aucun cas un 
engagement de la part de la Mutuelle Saint-Christophe assurances sous reserve de 
tout accord conclu par ecrit entre vous et la Mutuelle Saint-Christophe assurances.
Toute publication, utilisation ou diffusion, meme partielle, doit etre 
autorisee prealablement. Si vous n'etes pas destinataire de ce message, 
merci d'en avertir immediatement l'expediteur. 

This message is confidential. Its contents do not constitute a 
commitment by Mutuelle Saint-Christophe assurances except where provided for in 
a written agreement between you and Mutuelle Saint-Christophe assurances. Any 
unauthorised disclosure, use or dissemination, either whole or partial, is 
prohibited. If you are not the intended recipient of the message, please 
notify the sender immediately.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240924/8c0984e2/attachment.htm>