<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">If it helps, this is the output from idp-process.log (DEBUG)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:170] - Attempting to authenticate user yusuf.test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:180] - useFirstPass = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.803 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:181] - tryFirstPass = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:182] - storePass = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:183] - clearPass = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.804 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:184] - setLdapPrincipal = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:185] - setLdapDnPrincipal = false<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.805 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:186] - setLdapCredential = true<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:187] - defaultRole = []<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:188] - principalGroupName = null<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.806 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:189] - roleGroupName = null<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.807 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:77] - userRoleAttribute = []<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.834 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:83] - Created authenticator: edu.vt.middleware.ldap.auth.AuthenticatorConfig@979096278::env={java.naming.provider.url=ldaps://192.168.148.134:636
ldaps://192.168.148.210:636, java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory, java.naming.security.protocol=ssl}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.836 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.837 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] - dn = ou=Students,dc=kicds,dc=com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.838 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] - filter = (sAMAccountName={0})<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] - filterArgs = [yusuf.test]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.839 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] - searchControls = javax.naming.directory.SearchControls@7bdad0b1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.840 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@5abb53fd]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.840 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.841 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn = idp.ldap@kicds.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.842 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.852 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.867 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl@170cf6e0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager@10cd263e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.869 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] - hostname = 192.168.148.210<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.870 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] - cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.871 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.872 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl@170cf6e0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:29.873 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager@10cd263e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.098 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.099 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn = CN=yusuf test,ou=Students,dc=kicds,dc=com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.100 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.107 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set hostname verifier for ldaps<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.116 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for sun.security.ssl.X509TrustManagerImpl@544bdeaa<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.118 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking checkServerTrusted for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager@6c8a1aa3<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.119 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:122] - Verify with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] - hostname = 192.168.148.210<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.120 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] - cert = CN=kicds.com, OU=KIC, O=Kaplan, L=London, ST=UK, C=UK<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.121 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:155] - verifyIP using subjectAltNames = [192.168.148.134, 192.168.148.210, 192.168.199.251]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:161] - verifyIP found hostname match: 192.168.148.210<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.122 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for sun.security.ssl.X509TrustManagerImpl@544bdeaa<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.123 - DEBUG [edu.vt.middleware.ldap.ssl.AggregateTrustManager:90] - invoking getAcceptedIssuers invoked for edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager@6c8a1aa3<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.336 - INFO [edu.vt.middleware.ldap.jaas.JaasAuthenticator:176] - Authentication succeeded for dn: CN=yusuf test,ou=Students,dc=kicds,dc=com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.340 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.341 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] - dn = ou=Students,dc=kicds,dc=com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] - filter = (sAMAccountName={0})<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.342 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] - filterArgs = [yusuf.test]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] - searchControls = javax.naming.directory.SearchControls@8d40863<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.343 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@5abb53fd]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:223] - Committed the following principals: []<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.352 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:229] - Committed the following roles: []<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.353 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:178] - Successfully authenticated user yusuf.test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.356 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:144] - Returning control to authentication engine<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.357 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.360 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry@42a399e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.361 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:209] - Processing incoming request<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.362 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.364 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry@42a399e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514] - Completing user authentication process<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.365 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585] - Validating authentication was performed successfully<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:696] - Updating session information for principal yusuf.test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.366 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:700] - Creating shibboleth session for principal yusuf.test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.370 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36)
called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.373 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36,
expire 1800.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.408 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.409 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:815] - Adding IdP session cookie to HTTP response<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.411 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:715] - Recording authentication and service information in Shibboleth session for principal: yusuf.test<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.413 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, yusuf.test) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.419 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:96] - storageService.contains( session, 4153623746e6d7e5d53c957d4b7dea1513abfb5dca88c3bfe40cb9c8898a2268) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.436 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:560] - User yusuf.test authenticated with method urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.437 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:161] - Returning control to profile handler<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.437 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.440 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry@42a399e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.440 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:177] - Redirecting user to profile handler at https://idp.kaplaninternational.com:443/idp/profile/SAML2/Redirect/SSO<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedServletFilter:58] - Session available, storing on memcached...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.441 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.453 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36,
expire 1800.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.460 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.461 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:240] - storageService.put( session, f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0, edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36)
called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.472 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:445] - mc-write key session!f75aeb394249d6dbb05cca0cab9f5a129d439651d82a84b35b7cb8deb783d6f0 with value edu.internet2.middleware.shibboleth.idp.session.impl.SessionManagerEntry@5e834b36,
expire 1800.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:483] - returning local value (overwriting global)...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.478 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:314] - put writes local value.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.532 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.532 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.535 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns edu.internet2.middleware.shibboleth.idp.authn.LoginContextEntry@42a399e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:588] - Unbinding LoginContext<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.536 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:614] - Expiring LoginContext cookie<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.537 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:328] - storageService.remove( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:625] - Removed LoginContext, with key f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6, from StorageService
partition loginContexts<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.540 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:172] - Incoming request contains a login context and indicates principal was authenticated, processing second leg
of request<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.541 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.542 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.543 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.544 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.545 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.546 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.547 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.547 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128] - Looking up relying party configuration for https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.548 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134] - No custom relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth,
looking up configuration based on metadata groups.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.548 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.549 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.550 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.551 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://pass-mgt.kaplaninternational.com/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.551 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for https://pass-mgt.kaplaninternational.com/shibboleth.
Using default relying party configuration.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: https://idp.kaplaninternational.com/idp/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.552 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:520] - Searching for entity descriptor with an entity ID of https://idp.kaplaninternational.com/idp/shibboleth<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.559 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:99] - Filtering peer endpoints. Supported peer endpoint bindings: [urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign, urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST,
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/ECP because its binding urn:oasis:names:tc:SAML:2.0:bindings:PAOS
is not supported<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.560 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/POST because its binding urn:oasis:names:tc:SAML:1.0:profiles:browser-post
is not supported<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:114] - Removing endpoint https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML/Artifact because its binding urn:oasis:names:tc:SAML:1.0:profiles:artifact-01
is not supported<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.561 - DEBUG [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69] - Selecting endpoint by ACS URL 'https://pass-mgt.kaplaninternational.com/Shibboleth.sso/SAML2/POST' and protocol binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'
for request '_e5fc1da29ac3349042a11f3584cf383b' from entity 'https://pass-mgt.kaplaninternational.com/shibboleth'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.562 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:289] - Authentication failure, session missing during completion of profile handler<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.578 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:133] - storageService.get( loginContexts, f18ab243549107760fee8ffa09f7b177c7c8b735a87108d8b1ba5a856f88e6d6) called.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.582 - DEBUG [unimr.shib2.UniMrMemcachedStorageService:218] - get returns null<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.582 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:360] - No login context in storage service<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">18:03:30.583 - DEBUG [edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No relying party, nothing to display<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB">Regards</span><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB">Yusuf<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:EN-GB"> Yusuf
Tran <br>
<b>Sent:</b> 17 October 2013 18:03<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Upgrade to IDP 2.4.0 - Can not login<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi Guys,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m working on upgrading our IDP from version 2.3.8 to 2.4.0, I’ve taken great care to merge in the customisations (ldap, memcache, custom login pages etc) but after installation I keep getting the warning mentioned on this page:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges</a><o:p></o:p></p>
<p class="MsoNormal">‘Cookie-Related Error Handling Change’<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is after I hit the login page and attempt a login.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can someone help point me in the right direction?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:black;mso-fareast-language:EN-GB">Yusuf</span><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:blue;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>