<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">If IIS is crashing you need to look at the native log. This is most likely in the event viewer log<br><br><div dir="ltr">Sent from my iPhone</div><div dir="ltr"><br><blockquote type="cite">On 16 Oct 2019, at 09:07, Boni, Simone <sboni@ao.pr.it> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.StileMessaggioDiPostaElettronica17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hi, i’ve configured a SP to test SSO integration against ADFS.<o:p></o:p></p>
<p class="MsoNormal">Shibboleth is running fine and SAML request against ADFS is ok but, on redirect to my “secure” website, IIS default app pool crash. I’ve raised do DEBUG all logs (native, shibd and console) so i can see the correct SAML message exchange,
correct attribute mapping but i get this trace:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.AttributeDecoder.String [1] [default]: decoding SimpleAttribute (vat) from SAML 2 Attribute (http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier) with 1 value(s)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.AttributeFilter [1] [default]: filtering 1 attribute(s) from (http://federation.ao.pr.it/adfs/services/trust)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 WARN Shibboleth.AttributeFilter [1] [default]: no filter policies were loaded, filtering out all attributes from (http://federation.ao.pr.it/adfs/services/trust)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: creating new session<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SessionCache [1] [default]: storing new session...<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: inserted record (session) in context (_590f94575826613a452581c40dfa1821) with expiration (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 INFO Shibboleth.SessionCache [1] [default]: new session created: ID (_590f94575826613a452581c40dfa1821) IdP (http://federation.ao.pr.it/adfs/services/trust) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (::1)<o:p></o:p></p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: deleted record (c482ab63d00ed00f9804c5b4acbf8b6738d3de2994418cbab6ddef41413514bf) in context (RelayState)</span><o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.SSO.SAML2 [1] [default]: ACS returning via redirect to: https://sia-shibtest/secure/<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (find::StorageService::SessionCache)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG Shibboleth.Listener [1] [default]: dispatching message (touch::StorageService::SessionCache)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:45 DEBUG XMLTooling.StorageService [1] [default]: updated expiration of valid records in context (_590f94575826613a452581c40dfa1821) to (1571215185)<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: error reading size of input message<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: failed socket call (unknown), result (0): No error<o:p></o:p></p>
<p class="MsoNormal">2019-10-16 09:39:46 ERROR Shibboleth.Listener [1]: I/O failure processing request on socket (472)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I highligth a suspected row… why Storage Service delete the record? I think that this deletion cause next errors, but i don’t know why!<o:p></o:p></p>
<p class="MsoNormal">Am I missing something?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Transaction log report only AuthnRequest and Login transactions…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks.<o:p></o:p></p>
</div>
<span>-- </span><br><span>For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg</span><br><span>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</span></div></blockquote></body></html>