<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="IT" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi, i’ve configured a SP to test SSO integration against ADFS.<o:p></o:p></p>
<p class="MsoNormal">Shibboleth is running fine and SAML request against ADFS is ok but, on redirect to my “secure” website, IIS default app pool crash. I’ve raised do DEBUG all logs (native, shibd and console) so i can see the correct SAML message exchange,
correct attribute mapping but i get this trace:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.AttributeDecoder.String [1] [default]: decoding SimpleAttribute (vat) from SAML 2 Attribute (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier) with 1 value(s)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.AttributeFilter [1] [default]: filtering 1 attribute(s) from (http://federation.ao.pr.it/adfs/services/trust)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 WARN Shibboleth.AttributeFilter [1] [default]: no filter policies were loaded, filtering out all attributes from (http://federation.ao.pr.it/adfs/services/trust)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: creating new session<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: storing new session...<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: inserted record (session) in context (_590f94575826613a452581c40dfa1821) with expiration (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_590f94575826613a452581c40dfa1821) IdP (http://federation.ao.pr.it/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (::1)<o:p></o:p></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: deleted record (c482ab63d00ed00f9804c5b4acbf8b6738d3de2994418cbab6ddef41413514bf) in context (RelayState)</span><o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SSO.SAML2 [1] [default]: ACS returning via redirect to: https://sia-shibtest/secure/<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (touch::StorageService::SessionCache)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: error reading size of input message<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: failed socket call (unknown), result (0): No error<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: I/O failure processing request on socket (472)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I highligth a suspected row… why Storage Service delete the record? I think that this deletion cause next errors, but i don’t know why!<o:p></o:p></p>
<p class="MsoNormal">Am I missing something?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Transaction log report only AuthnRequest and Login transactions…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks.<o:p></o:p></p>
</div>
</body>
</html>