<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span>Thanks You very much Scott,</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>So from your conversation i understood that the key problem is not generating the session cookie.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>so if i try to see to generate it , may be it will solve the problem. </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>i will try
to looks through the documentation to see if i can find the info on generation.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>the native log has</span></div><div style="background-color: transparent;">2013-06-28 14:21:53 INFO Shibboleth.Config : shibboleth 2.5.1 library shutting down</div><div style="background-color: transparent;">2013-06-28 14:21:53 INFO Shibboleth.Config : reload thread finished</div><div style="background-color: transparent;">2013-06-28 14:21:53 INFO Shibboleth.SessionCache : cleanup thread exiting</div><div style="background-color: transparent;">2013-06-28 14:21:53 INFO XMLTooling.Config : xmltooling 1.5.2 library shutdown
complete</div><div style="background-color: transparent;">2013-06-28 14:21:53 INFO Shibboleth.Config : shibboleth 2.5.1 library shutdown complete</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO XMLTooling.Config : xmltooling 1.5.2 library initialization complete</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : shibboleth 2.5.1 library initialization complete</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : reload thread started...running when signaled</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : loaded XML resource (C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml)</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : Shibboleth SP Version 2.5.1</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : Library
versions: log4shib 1.0.5, Xerces-C 3.1.1, XMLTooling-C 1.5.2, Shibboleth 1.5.1</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : building ListenerService of type TCPListener...</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : building SessionCache of type StorageService...</div><div style="background-color: transparent;">2013-06-28 15:11:13 WARN Shibboleth.SessionCache : cacheTimeout property is deprecated in favor of cacheAllowance (see documentation)</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.Config : building RequestMapper of type Native...</div><div style="background-color: transparent;">2013-06-28 15:11:13 INFO Shibboleth.SessionCache : cleanup thread started...run every 900 secs; timeout after 900 secs</div><div style="background-color: transparent;"><span></span></div><div style="background-color:
transparent;">2013-06-28 15:11:13 INFO Shibboleth.AssertionLookup : installing default ACL (127.0.0.1 ::1)</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">hope you have a good vacation.</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">thanks again scott,</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><br></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px;
font-family: 'times new roman', 'new york', times, serif; font-style: normal;">thanks,</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">Justin</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users
<users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, June 28, 2013 3:12 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Unable to parse SAML attributes and redirecting the request
back to the URL<br> </font> </div> <div class="y_msg_container"><br>On 6/28/13 3:00 PM, "justin9" <<a ymailto="mailto:justin9@ymail.com" href="mailto:justin9@ymail.com">justin9@ymail.com</a>> wrote:<br><br>>Hi Scott,<br>><br>>well i also see cookies being generated in my computer.<br><br>Cookies come from web servers.<br><br>>i went trough the documentation and i believe but might be wrong that the<br>>error is happening at the step # 6 Back to the Protected Resource.<br><br>I believe your redirect either doesn't happen, or happens with no session<br>cookie, which is what causes all loops.<br><br>>I have the debug info from my shibd.log and it doesnt have any place where<br>>session is invalid.<br><br>No, because most likely no session cookie is being supplied by your<br>client, but you should check native.log as well.<br><br>That's a loop:<br><br>2013-06-28 11:36:41 INFO Shibboleth.SessionCache [1]: new session
created:<br>ID (_c41a8cf8ea72f00ae2f9b755d32814f9) IdP<br>(<a href="https://abccompany.org/SAML2/IDP" target="_blank">https://abccompany.org/SAML2/IDP</a>)<br>Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (10.1.1.202)<br>2013-06-28 11:36:41 DEBUG Shibboleth.SSO.SAML2 [1]: ACS returning via<br>redirect to: <a href="https://myserver/roundup" target="_blank">https://myserver/roundup</a><br>2013-06-28 11:36:41 DEBUG Shibboleth.Listener [1]: dispatching message<br>(default/Login::run::SAML2SI)<br><br><br>If the session cookie were present, it wouldn't jump from sending you to<br>the resource to initiating a new session.<br><br>Your log doesn't suggest a problem with the ACS and resource vhosts not<br>matching, which is another source of looping. Both use a bogus "myserver"<br>unqualified hostname, which should make them part of a common cookie<br>domain.<br><br>So I have no suggestion. You have no alternative but to trace the traffic<br>and
determine why the shibsession cookie is not being returned at the end.<br><br>I'm on vacation, so do not expect any further responses, there's nothing<br>new here I can tell you.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>