<!DOCTYPE HTML><html>
<head>
<meta name="Generator" content="Amazon WorkMail v3.0-4481">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>RE: User Agent (web browser) atuck at /Shibboleth.sso/SAML2/POST</title>
</head>
<body>
<p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">shsam,</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;"> </p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">The below makes no assumptions about the hosts you're using, such as whether you're starting on one and landing on the other, or what your network architecture looks like, e.g. two load-balanced SP's, one of which is online. The other prime candidate to consider is that something else is running in Apache and hijacking the request before Shibboleth gets a chance to operate on it. What do your SSL access logs look like?</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;"> </p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">Best wishes,</p><p style="margin: 0px; font-family: Arial, Tahoma, Helvetica, sans-serif; font-size: small;">Nate.</p><blockquote style="border-left:2px solid #b0b0b7; margin-left:5px; margin-right:0px; padding-left:5px">-----Original message-----<br /><strong>From:</strong> Nate Klingenstein<br /><strong>Sent:</strong> Saturday, August 17 2019, 2:02 am<br /><strong>To:</strong> Shib Dev; dev@shibboleth.net<br /><strong>Subject:</strong> RE: User Agent (web browser) atuck at /Shibboleth.sso/SAML2/POST<br /><br /><!-- begin sanitized html --><div class="bodyclass"><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">shsam,</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">> Any insight on why it was stuck at /Shibboleth.sso/SAML2/POST ?</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">This question is appropriate for the users' list rather than the developers' list, but it sounds like you're simply hitting a firewall somewhere and your client isn't timing out, unless other traffic can get to other HTTP resources or you can demonstrate that the packets are getting through. That's the first landing point when you access to the SP with an assertion.</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px"> </p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Take care,</p><p style="font-family:Arial,Tahoma,Helvetica,sans-serif; font-size:small; margin:0px">Nate.</p><blockquote style="border-left:2px solid #b0b0b7; margin-left:5px; margin-right:0px; padding-left:5px">-----Original message-----<br /><strong>From:</strong> shsam<br /><strong>Sent:</strong> Friday, August 16 2019, 7:04 pm<br /><strong>To:</strong> dev@shibboleth.net<br /><strong>Subject:</strong> User Agent (web browser) atuck at /Shibboleth.sso/SAML2/POST<br /> <pre style="white-space:pre-wrap; word-wrap:break-word">* I start the shib session by accessing a protected resource (say
<a title="This external link opens in a new window" href="https://mysite.com/secure">https://mysite.com/secure</a>) at Shibboleth Service Provider from a web browser
* That took me to IdP login and i logged in with my credentials
* However after login, the browser does a form post to
/Shibboleth.sso/SAML2/POST but that doesn't respond.... i waited for more
than 10 minutes and it timed out.
Any insight on why it was stuck at /Shibboleth.sso/SAML2/POST ?
--
Sent from: <a title="This external link opens in a new window" href="https://shibboleth.1660669.n2.nabble.com/Shibboleth-Developers-f1660781.html">https://shibboleth.1660669.n2.nabble.com/Shibboleth-Developers-f1660781.html</a>
--
To unsubscribe from this list send an email to <a title="This external link opens in a new window" href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a>
</pre></blockquote></div> <!-- end sanitized html --></blockquote>
</body>
</html>