<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Good day,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We had some users experiencing some authentication issues last Wednesday evening between 7pm to 9pm on our IDP. When this was happening some users were not able to login and would receive “Authentication Failed” on our IDP login page
while trying to access some of our SP’s. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here is an example log of one of those users:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">19:21:28.043 - INFO [edu.vt.middleware.ldap.Authenticator:301] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:28.043 - DEBUG [edu.vt.middleware.ldap.Authenticator:198] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:28.047 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:192] - User authentication for [student1] failed<o:p></o:p></p>
<p class="MsoNormal">19:21:28.048 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:142] - Redirecting to login page /login.jsp<o:p></o:p></p>
<p class="MsoNormal">19:21:24.938 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:163] - Attempting to authenticate user student1<o:p></o:p></p>
<p class="MsoNormal">19:21:24.938 - DEBUG [edu.vt.middleware.ldap.LdapProperties:299] - edu.vt.middleware.ldap.auth.userField = uid<o:p></o:p></p>
<p class="MsoNormal">19:21:24.939 - DEBUG [edu.vt.middleware.ldap.LdapProperties:299] - edu.vt.middleware.ldap.auth.subtreeSearch = true<o:p></o:p></p>
<p class="MsoNormal">19:21:24.939 - DEBUG [edu.vt.middleware.ldap.Authenticator:143] - Looking up DN from userfield and base<o:p></o:p></p>
<p class="MsoNormal">19:21:24.939 - DEBUG [edu.vt.middleware.ldap.Ldap:549] - Search with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:21:24.939 - DEBUG [edu.vt.middleware.ldap.Ldap:550] - dn = OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:24.940 - DEBUG [edu.vt.middleware.ldap.Ldap:551] - filter = (uid=student1)<o:p></o:p></p>
<p class="MsoNormal">19:21:24.940 - DEBUG [edu.vt.middleware.ldap.Ldap:552] - filterArgs =
<o:p></o:p></p>
<p class="MsoNormal">19:21:24.940 - DEBUG [edu.vt.middleware.ldap.Ldap:554] - none<o:p></o:p></p>
<p class="MsoNormal">19:21:24.941 - DEBUG [edu.vt.middleware.ldap.Ldap:558] - retAttrs =
<o:p></o:p></p>
<p class="MsoNormal">19:21:24.941 - DEBUG [edu.vt.middleware.ldap.Ldap:562] - []<o:p></o:p></p>
<p class="MsoNormal">19:21:24.941 - DEBUG [edu.vt.middleware.ldap.Ldap:1538] - Bind with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:21:24.942 - DEBUG [edu.vt.middleware.ldap.Ldap:1539] - dn = shibbuser@ldap.local<o:p></o:p></p>
<p class="MsoNormal">19:21:24.942 - DEBUG [edu.vt.middleware.ldap.Ldap:1543] - credential = <suppressed><o:p></o:p></p>
<p class="MsoNormal">19:21:28.038 - DEBUG [edu.vt.middleware.ldap.Ldap:1538] - Bind with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:21:28.038 - DEBUG [edu.vt.middleware.ldap.Ldap:1539] - dn = CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:28.038 - DEBUG [edu.vt.middleware.ldap.Ldap:1543] - credential = <suppressed><o:p></o:p></p>
<p class="MsoNormal">19:21:28.043 - INFO [edu.vt.middleware.ldap.Authenticator:301] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:28.043 - DEBUG [edu.vt.middleware.ldap.Authenticator:198] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:21:28.047 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:192] - User authentication for [student1] failed<o:p></o:p></p>
<p class="MsoNormal">19:21:28.048 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:142] - Redirecting to login page /login.jsp<o:p></o:p></p>
<p class="MsoNormal">19:22:07.151 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:163] - Attempting to authenticate user student1<o:p></o:p></p>
<p class="MsoNormal">19:22:07.152 - DEBUG [edu.vt.middleware.ldap.LdapProperties:299] - edu.vt.middleware.ldap.auth.userField = uid<o:p></o:p></p>
<p class="MsoNormal">19:22:07.153 - DEBUG [edu.vt.middleware.ldap.LdapProperties:299] - edu.vt.middleware.ldap.auth.subtreeSearch = true<o:p></o:p></p>
<p class="MsoNormal">19:22:07.153 - DEBUG [edu.vt.middleware.ldap.Authenticator:143] - Looking up DN from userfield and base<o:p></o:p></p>
<p class="MsoNormal">19:22:07.153 - DEBUG [edu.vt.middleware.ldap.Ldap:549] - Search with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:22:07.154 - DEBUG [edu.vt.middleware.ldap.Ldap:550] - dn = OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:22:07.154 - DEBUG [edu.vt.middleware.ldap.Ldap:551] - filter = (uid=student1)<o:p></o:p></p>
<p class="MsoNormal">19:22:07.154 - DEBUG [edu.vt.middleware.ldap.Ldap:552] - filterArgs =
<o:p></o:p></p>
<p class="MsoNormal">19:22:07.154 - DEBUG [edu.vt.middleware.ldap.Ldap:554] - none<o:p></o:p></p>
<p class="MsoNormal">19:22:07.154 - DEBUG [edu.vt.middleware.ldap.Ldap:558] - retAttrs =
<o:p></o:p></p>
<p class="MsoNormal">19:22:07.155 - DEBUG [edu.vt.middleware.ldap.Ldap:562] - []<o:p></o:p></p>
<p class="MsoNormal">19:22:07.155 - DEBUG [edu.vt.middleware.ldap.Ldap:1538] - Bind with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:22:07.155 - DEBUG [edu.vt.middleware.ldap.Ldap:1539] - dn = shibbuser@ldap.local<o:p></o:p></p>
<p class="MsoNormal">19:22:07.155 - DEBUG [edu.vt.middleware.ldap.Ldap:1543] - credential = <suppressed><o:p></o:p></p>
<p class="MsoNormal">19:22:10.239 - DEBUG [edu.vt.middleware.ldap.Ldap:1538] - Bind with the following parameters:<o:p></o:p></p>
<p class="MsoNormal">19:22:10.239 - DEBUG [edu.vt.middleware.ldap.Ldap:1539] - dn = CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:22:10.240 - DEBUG [edu.vt.middleware.ldap.Ldap:1543] - credential = <suppressed><o:p></o:p></p>
<p class="MsoNormal">19:22:10.243 - INFO [edu.vt.middleware.ldap.Authenticator:301] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:22:10.244 - DEBUG [edu.vt.middleware.ldap.Authenticator:198] - Authentication failed for user: CN=student1,OU=Students,OU=Accounts,DC=ldap,DC=local<o:p></o:p></p>
<p class="MsoNormal">19:22:10.247 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:192] - User authentication for [student1] failed<o:p></o:p></p>
<p class="MsoNormal">19:22:10.248 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:142] - Redirecting to login page /login.jsp<o:p></o:p></p>
<p class="MsoNormal">19:22:40.209 - INFO [Shibboleth-Access:72] - 20150212T012240Z|172.2.x.x|idp.atmyu.edu:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></p>
<p class="MsoNormal">19:22:40.210 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:85] - shibboleth.HandlerManager: Looking up profile handler<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We are running an older version of shibboleth 2.1.2, we are looking to upgrade sometime later this year<o:p></o:p></p>
<p class="MsoNormal">Things are working fine since and users are authenticating successfully but just want to get a second set of eyes.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks<o:p></o:p></p>
<p class="MsoNormal">Vince<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>