<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.32.2">
</HEAD>
<BODY>
A clarification: The RemoteUser is configured in the web.xml, and functions correctly the first time the SP contacts the IdP (not including a session Id). <BR>
The error log entries I included below are for when the browser has sat idle for more than the IdP session limit, but still submits the IdP session id it has in the request. Since that session has expired, no REMOTE_USER is found. That is when I wish for the IdP to re-run the login flow from scratch (or some other proper way to allow it to get back to a login screen.) Thank you.<BR>
<BR>
<BR>
On Thu, 2016-07-07 at 14:49 -0600, Erik Guss wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<TT><FONT COLOR="#1a1a1a">Hello,</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">I've recently upgraded to IdP v3.2.1. I have followed the basic</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">configuration for RemoteUser via the documentation. A particular SP</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">problem I am having is that in the case of an expired session, the login</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">flow is not re-triggered as we wish. An error log sequence is included</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">below illustrating what is happening. My question is, what would be the</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">proper xml stanza to use in conf/authn/remoteuser-authn-config.xml to</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">trigger RemoteUser again if an existing authentication result is</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">inactive? Thank you.</FONT></TT><BR>
<BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,486 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:167] -</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Profile Action PopulateAuthenticationContext: Installed 1 authentication</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">flows into AuthenticationContext</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,488 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.session.impl.StorageBackedSessionManager:707] -</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Performing primary lookup on session ID</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">ebab536b9a26a518255bcfa5951153219f966799afa33af278c77aec19bef3e6</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,492 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.session.impl.StorageBackedIdPSession:90] - Updating</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">expiration of master record for session</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">ebab536b9a26a518255bcfa5951153219f966799afa33af278c77aec19bef3e6 to</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11T11:22:13.492-06:00</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,504 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.session.impl.StorageBackedIdPSession:528] - Loading</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">AuthenticationResult for flow authn/RemoteUser in session</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">ebab536b9a26a518255bcfa5951153219f966799afa33af278c77aec19bef3e6</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,510 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults:116]</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">- Profile Action ExtractActiveAuthenticationResults: authentication</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">result authn/RemoteUser is inactive, skipping it</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,511 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults:122]</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">- Profile Action ExtractActiveAuthenticationResults: no active</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">authentication results, SSO will not be possible</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,542 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:53] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action FilterFlowsByForcedAuthn: Request does not have forced</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">authentication requirement, nothing to do</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,543 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.FilterFlowsByPassivity:53] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action FilterFlowsByPassivity: Request does not have passive</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">requirement, nothing to do</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,544 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:53] -</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Profile Action FilterFlowsByNonBrowserSupport: Request does not have</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">non-browser requirement, nothing to do</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,546 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:257] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: No specific Principals requested</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,546 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:292] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: No usable active results available,</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">selecting an inactive flow</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,547 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:334] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: Selecting inactive authentication flow</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">authn/RemoteUser</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,574 - INFO</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:121] -</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Profile Action ValidateExternalAuthentication: External authentication</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">failed, no user identity or error information returned</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,578 - INFO</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:130] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: Moving incomplete flow authn/RemoteUser</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">to intermediate set</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,579 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:257] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: No specific Principals requested</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,579 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:292] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: No usable active results available,</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">selecting an inactive flow</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,580 - ERROR</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:296] - Profile</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">Action SelectAuthenticationFlow: No potential flows left to choose from,</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">authentication will fail</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,596 - WARN</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">while processing the request: NoPotentialFlow</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">2016-05-11 10:22:13,597 - DEBUG</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:184]</FONT></TT><BR>
<TT><FONT COLOR="#1a1a1a">- Error event NoPotentialFlow will be handled with response</FONT></TT><BR>
<BR>
<BR>
</BLOCKQUOTE>
</BODY>
</HTML>