Have you noticed that the same user tries to login two times in a few seconds?<br>The second request contains the login context that is removed without redirect to login page.<br><br>Below the first login attemps:<br>10:40:59.604 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:170] - Attempting to authenticate user XXXXXXXXXXXX<br>
10:40:59.767 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178] - Successfully authenticated user XXXXXXXXXXXX<br>10:40:59.767 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine<br>
10:40:59.767 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request<br>10:40:59.768 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:517] - Completing user authentication process<br>
10:40:59.768 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:588] - Validating authentication was performed successfully<br>10:40:59.768 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:699] - Updating session information for principal XXXXXXXXXXXX<br>
10:40:59.768 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:703] - Creating shibboleth session for principal XXXXXXXXXXXX<br>10:40:59.769 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:809] - Adding IdP session cookie to HTTP response<br>
10:40:59.769 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:718] - Recording authentication and service information in Shibboleth session for principal: IN2797738biw<br>10:40:59.769 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] - User XXXXXXXXXXXX authenticated with method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<br>
10:40:59.769 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161] - Returning control to profile handler<br>10:40:59.770 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177] - Redirecting user to profile handler at <a href="https://www.inarcassa.it:443/idp/profile/SAML2/Redirect/SSO">https://www.inarcassa.it:443/idp/profile/SAML2/Redirect/SSO</a><br>
10:41:00.031 - INFO [Shibboleth-Access:74] - 20111128T094100Z|79.20.163.100|www.inarcassa.it:443|/profile/SAML2/Redirect/SSO|<br>10:41:00.032 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<br>
10:41:00.032 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.<br>
profile.saml2.SSOProfileHandler<br>10:41:00.032 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:163] - Incoming request contains a login context, processing as second leg of request<br>10:41:00.032 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:572] - Unbinding LoginContext<br>
10:41:00.032 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:598] - Expiring LoginContext cookie<br>10:41:00.033 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:607] - Removing LoginContext, with key 1a400362-c2f8-41e3-9780-72216663fee6, from StorageService partition loginContexts<br>
10:41:00.033 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a><br>
10:41:00.033 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>, looking up configu<br>
ration based on metadata groups.<br>10:41:00.033 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>. Usi<br>
ng default relying party configuration.<br>10:41:00.034 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:472] - Resolving attributes for principal 'XXXXXXXXXXXX' for SAML request from relying party '<a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>'<br>
<br>The second request without redirect to login page:<br>10:41:20.328 - INFO [Shibboleth-Access:74] - 20111128T094120Z|93.70.49.139|www.inarcassa.it:443|/profile/SAML2/Redirect/SSO|<br>10:41:20.328 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<br>
10:41:20.329 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.<br>
profile.saml2.SSOProfileHandler<br>10:41:20.329 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:163] - Incoming request contains a login context, processing as second leg of request<br>10:41:20.329 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:572] - Unbinding LoginContext<br>
10:41:20.329 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:598] - Expiring LoginContext cookie<br>10:41:20.329 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:607] - Removing LoginContext, with key 0f036b58-d567-4517-b7ea-b6d28ca6f7a5, from StorageService partition loginContexts<br>
10:41:20.330 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a><br>
10:41:20.330 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>, looking up configu<br>
ration based on metadata groups.<br>10:41:20.330 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for <a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>. Usi<br>
ng default relying party configuration.<br>10:41:20.331 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:472] - Resolving attributes for principal 'null' for SAML request from relying party '<a href="https://www.inarcassa.it/shibboleth">https://www.inarcassa.it/shibboleth</a>'<br>
<br>Thanks<br><br><div class="gmail_quote">2011/11/29 Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Well, when you posted your logs you removed almost anything that<br>
indicates what happened during authentication. So that might be a<br>
good place to start looking.<br>
<br>
On Tue, Nov 29, 2011 at 07:32, Daniele Russo <<a href="mailto:ruda76@gmail.com">ruda76@gmail.com</a>> wrote:<br>
> Anyone can help me?<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>