<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">I can replicate the issue by starting a clean browser everytime.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If I modify my host file to go to specific back-end nodes I see no issue.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">When the error occurs this is my last line in idp-process.log<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2021-03-01 12:57:49,927 - 65.36.72.77 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:369] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/External<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">When I get past the error I see the same line then the following.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2021-03-01 13:47:25,577 - 10.254.0.2 - INFO [net.unicon.idp.externalauth.AuthenticatedNameTranslator:61] - Created an IdP subject instance with principals containing attributes for thucker
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2021-03-01 13:47:25,634 - 10.254.0.2 - INFO [net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:176] - Profile Action ValidateExternalAuthentication: External authentication succeeded for Subject<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Could it be an issue with the plugin? <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Taylor<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black"> </span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">--------------------------------</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">Taylor Hucker</span></b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black"><br>
Applications System Administrator<br>
Texas A&M University - Corpus Christi<br>
</span><span style="color:black"><a href="mailto:Taylor.Hucker@tamucc.edu"><span style="font-size:11.0pt;background:white">Taylor.Hucker@tamucc.edu</span></a></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="color:black">From:
</span></b><span style="color:black">users <users-bounces@shibboleth.net> on behalf of Hucker, Taylor <taylor.hucker@tamucc.edu><br>
<b>Date: </b>Monday, March 1, 2021 at 12:24 PM<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Subject: </b>Error on IdP v4 after cutover<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">2/25 we moved our IdP v4 environment into production.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">It was noticed today when going to an SP this error page appears, “Sorry, it looks like there is a problem finding your session. This can happen if you waited too long on the login page, or if you were redirected
to a different server that issued the original request. This error usually goes away if you try accessing your desired application again.”<br>
<br>
<br>
</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">It appears that if we access any resource (same or different) then the authentication occurs.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">I am seeing this in the logs
</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">2021-03-01 12:05:56,299 - 151.80.19.216 - ERROR [org.springframework.webflow.execution.repository.NoSuchFlowExecutionException:74] -</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">org.springframework.webflow.execution.repository.NoSuchFlowExecutionException: No flow execution could be found with key 'e1s1' -- perhaps this executing flow has ended or expired? This could happen
if your users are relying on browser history (typically via the back button) that references ended flows.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> at org.springframework.webflow.execution.repository.support.AbstractFlowExecutionRepository.getConversation(AbstractFlowExecutionRepository.java:172)</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Caused by: org.springframework.webflow.conversation.NoSuchConversationException: No conversation could be found with id '1' -- perhaps this conversation has ended?</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> at org.springframework.webflow.conversation.impl.ConversationContainer.getConversation(ConversationContainer.java:126)</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">The issue is repeatable in every clean browser sessions on the first auth attempt.
</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Our environemnt contains 2 nodes sitting behind F5. Currently have one node offline. We also use Unicons
</span><a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FUnicon%2Fshib-cas-authn&data=04%7C01%7Ctaylor.hucker%40tamucc.edu%7Caf89ac934b694f32b2c808d8dcdf4abc%7C34cbfaf167a64781a9ca514eb2550b66%7C0%7C0%7C637502198883850863%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=6zIilOmXo67hCooULSjQst152Q%2BZ3ti6LpBi4KFYPi8%3D&reserved=0"><span style="font-size:11.0pt">https://github.com/Unicon/shib-cas-authn</span></a><span style="font-size:11.0pt;color:black">
plugin to delegate auth to CAS.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Any suggestions?</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> </span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Thanks,</span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Taylor</span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black"> </span></b></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">--------------------------------</span></b></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">Taylor Hucker</span></b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black"><br>
Applications System Administrator<br>
Texas A&M University - Corpus Christi<br>
</span><span style="color:black"><a href="mailto:Taylor.Hucker@tamucc.edu"><span style="font-size:11.0pt;background:white">Taylor.Hucker@tamucc.edu</span></a></span></p>
<p class="MsoNormal"> </p>
</div>
</body>
</html>