<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Absolutely.<br>
<br>
when I authenticate it seems to create an idp session successfully:<br>
<br>
2016-02-02 11:14:43,297 - DEBUG
[net.shibboleth.idp.session.impl.DetectIdentitySwitch:148] - Profile
Action DetectIdentitySwitch: No previous session found, nothing to
do<br>
2016-02-02 11:14:43,298 - DEBUG
[net.shibboleth.idp.authn.impl.FinalizeAuthentication:137] - Profile
Action FinalizeAuthentication: Canonical principal name was
established as 'biggsb'<br>
2016-02-02 11:14:43,299 - DEBUG
[net.shibboleth.idp.authn.impl.FinalizeAuthentication:186] - Profile
Action FinalizeAuthentication: Request did not have explicit
authentication requirements, result is accepted<br>
2016-02-02 11:14:43,300 - DEBUG
[net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:221]
- Profile Action UpdateSessionWithAuthenticationResult: Creating new
session for principal biggsb<br>
2016-02-02 11:14:43,303 - DEBUG
[net.shibboleth.idp.session.impl.StorageBackedSessionManager:533] -
Created new session
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 for
principal biggsb<br>
2016-02-02 11:14:43,304 - DEBUG
[net.shibboleth.idp.session.impl.StorageBackedIdPSession:561] -
Saving AuthenticationResult for flow authn/Password in session
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0<br>
<br>
<br>
However, when I go back to the same page that I got into, it sends
me back to authenticate again and I see:<br>
<br>
2016-02-02 11:14:44,669 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136]
- Profile Action SelectRelyingPartyConfiguration: Found relying
party configuration shibboleth.DefaultRelyingParty for request<br>
2016-02-02 11:14:44,670 - DEBUG
[net.shibboleth.idp.cas.flow.impl.ValidateTicket Action:92] -
Attempting to validate ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm<br>
2016-02-02 11:14:44,670 - DEBUG
[net.shibboleth.idp.cas.ticket.impl.SimpleTicket Service:226] -
Reading ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm<br>
2016-02-02 11:14:44,670 - DEBUG
[net.shibboleth.idp.cas.ticket.impl.SimpleTicket Service:215] -
Attempting to delete ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm from
context <a class="moz-txt-link-freetext" href="https://www.apereo.org/cas/protocol/login">https://www.apereo.org/cas/protocol/login</a><br>
2016-02-02 11:14:44,670 - DEBUG
[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:101] - Found
and removed
ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm/3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0
from ticket store<br>
2016-02-02 11:14:44,671 - INFO
[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:117] -
Successfully validated ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm
for <a class="moz-txt-link-freetext" href="https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi">https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi</a><br>
2016-02-02 11:14:44,671 - DEBUG
[net.shibboleth.idp.cas.flow.impl.ValidateIdpSessionAction:81] -
Attempting to retrieve session
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0<br>
2016-02-02 11:14:44,671 - DEBUG
[net.shibboleth.idp.session.impl.StorageBackedSessionManager:707] -
Performing primary lookup on session ID
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0<br>
2016-02-02 11:14:44,673 - DEBUG
[net.shibboleth.idp.session.impl.StorageBackedIdPSession:90] -
Updating expiration of master record for session
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 to
2016-02-02T12:14:44.673-08:00<br>
2016-02-02 11:14:44,673 - DEBUG
[net.shibboleth.idp.cas.flow.impl.ValidateIdpSessionAction:91] -
Session
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0
expired=false<br>
2016-02-02 11:14:45,212 - INFO [Shibboleth-Audit.SSO:241] -
20160202T191445Z||3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0|<a class="moz-txt-link-freetext" href="https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi">https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi</a>|<a class="moz-txt-link-freetext" href="https://www.apereo.org/cas/protocol/serviceValidate">https://www.apereo.org/cas/protocol/serviceValidate</a>||||biggsb|||biggsb|ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm|<br>
<br>
<br>
(BTW, it's a bit weird seeing
<a class="moz-txt-link-rfc2396E" href="https://www.apereo.org/cas/protocol/serviceValidate">"https://www.apereo.org/cas/protocol/serviceValidate"</a> in the logs
since i have no references to it...)<br>
<br>
Thanks for looking<br>
-Brian<br>
<br>
<div class="moz-cite-prefix">On 02/02/2016 10:36 AM, Marvin Addison
wrote:<br>
</div>
<blockquote
cite="mid:CACOs9MTiTcha6oqsgqmoPb9+GKi-+oT=UFZADZpmyKHTT1gucg@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div dir="ltr">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">idp.session.StorageService
= shibboleth.StorageService<br>
idp.cas.StorageService=shibboleth.StorageService</blockquote>
<div><br>
</div>
<div>That should work. Can you share some logs? You should
never need to increase the ticket timeout beyond the
default.</div>
<div><br>
</div>
<div>M<br>
</div>
<div><br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Brian Biggs
Sonoma State University
</pre>
</body>
</html>