Apache Shibboleth SP Stuck at /Shibboleth.sso/SAML2/POST after IDP login

[Ignacio Amoeiro Bosch]

Hi Team,

After migrating from RH8 to RH9, we've come across something weird on a Shibboleth SP on Apache.

When we go to a protected resource ( /secure for example) we are being redirected to the IDP, and after login in, browser is stuck at /Shibboleth.sso/SAML2/POST without any error, it keeps there endless till browser timeout.

This happens after migrating from Redhat8 to Redhat 9.5 ( I have other servers with 9.5 + SP working fine)

Things I have tried:

- Shibboleth SP clean install (rpm removed + depedencies, deleted /etc/shibboleth, and reinstalled from rockylinux9 repo).
- Apache HTTPD clean install (rpm removed, deleted /etc/httpd, and reinstalled)


Firewall is disabled
Antivirus disabled

As I said, the http request is not getting answered so, I can't see any error on apache logs or shibd logs.

Apache httpd process are 100% CPU after I do the first request to /Shibboleth.sso/SAML2/POST endpoint.

Every other public pages are working fine.

I tried to set some loggers in apache or shibd to debug, but can't see anything relevant.

And  the worst, i don't see any error on apache logs or shibd logs.

Any idea?

Thanks.