<div dir="ltr">Using SP 3.4 I'm trying to use the "target" attribute to be redirected back after logging in. This works nicely when on a single machine, but doesn't work in a cluster. The cluster is behind a load balancer.<div><br></div><div>The session seems to work, both with and without clustering, since I can load a protected resource after login and show the same correct session data and server variables on all the machines. I just can't have the target attribute working in a cluster.</div><div><br></div><div>The session is defined this way:</div><div> <DataSealer type="Static" key="<key>" /><br> <SessionCache type="StorageService" persistedAttributes="uid mail givenName displayName" /><br></div><div><br></div><div>This is my requestmapper:</div><div><br></div><div><RequestMapper type="Native"><br> <RequestMap> <br> <Host name="<sproot>"><br> <Path name="testsecure" ><br> <Path name="loginsso.aspx" requireSession="true"><br> <Query name="languagecode" regex="^it.*" target="https://
<sproot>/it/loginsso.aspx" /><br> <Query name="languagecode" regex="^en.*" target="https://<sproot>/testsecure/en/loginsso.aspx" /><br> <Query name="languagecode" regex="^fr.*" target="https://<sproot>/ testsecure/fr/loginsso.aspx" /><br> <Query name="languagecode" regex="^ar.*" target="https://<sproot>/testsecure/ar/loginsso.aspx" /><br> </Path><br> </Path><br> </Host><br> </RequestMap><br> </RequestMapper><br></div><div><br></div><div>My
ApplicationDefaults :</div><div><br></div><div> <ApplicationDefaults entityID="https://<sproot>/shibboleth"<br> REMOTE_USER="eppn subject-id pairwise-id persistent-id uid mail givenName displayName" cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1"><br></div><div><br></div><div>The logs on the landing server when in clustering:</div><div><br></div><div>2024-06-19 15:52:35 DEBUG Shibboleth.Listener [1] [default]: dispatching message (default/Login::run::SAML2SI)<br>2024-06-19 15:52:35 DEBUG XMLTooling.StorageService [1] [default]: inserted record (2846ea8faf1327f78722c431ead8c4536316c3251db68487b8ce0b4c1b0f20e9) in context (RelayState) with expiration (1718805755)<br>2024-06-19 15:52:35 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: validating input<br>2024-06-19 15:52:35 DEBUG OpenSAML.MessageEncoder.SAML2 [1] [default]: tracking request (_1f1b443a8d5b53c71ceb8f8b126691e7) against RelayState token (ss:mem:2846ea8faf1327f78722c431ead8c4536316c3251db68487b8ce0b4c1b0f20e9)<br>2024-06-19 15:52:35 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalling, deflating, base64-encoding the message<br>2024-06-19 15:52:35 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: marshalled message:<br><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://<sproot>/Shibboleth.sso/SAML2/POST" Destination="https://<idproot>idp/profile/SAML2/Redirect/SSO" ID="_1f1b443a8d5b53c71ceb8f8b126691e7" IssueInstant="2024-06-19T13:52:35Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://<sproot>/shibboleth</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest><br>2024-06-19 15:52:35 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1] [default]: message encoded, sending redirect to client<br>2024-06-19 16:07:02 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage<br></div><div><br></div><div><br></div><div>Logs when it works on a single machine:</div><div><br></div><div>2024-06-19 11:37:34 DEBUG XMLTooling.StorageService [2] [default]: deleted record (34714d31483b081cfedb09d2b8abc7c2260341572cf56c3729ce8834743ef824) in context (RelayState)<br>2024-06-19 11:37:34 DEBUG Shibboleth.SSO.SAML2 [2] [default]: ACS returning via redirect to: https://<sproot>/testsecure/en/loginsso.aspx<br>2024-06-19 11:37:34 DEBUG Shibboleth.Listener [2] [default]: dispatching message (find::StorageService::SessionCache)<br>2024-06-19 11:37:34 DEBUG XMLTooling.StorageService [2] [default]: updated expiration of valid records in context (_02341065cf0311611fa4e105bcfcff91) to (1718793454)<br>2024-06-19 11:37:37 DEBUG Shibboleth.Listener [2] [default]: dispatching message (default/Logout::run::SAML2LI)<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: searching for session (_02341065cf0311611fa4e105bcfcff91)<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: reconstituting session and checking validity<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: unmarshalled attribute (ID: mail) with 1 value<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: unmarshalled attribute (ID: uid) with 1 value<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: unmarshalled attribute (ID: givenName) with 1 value<br>2024-06-19 11:37:37 DEBUG Shibboleth.SessionCache [2] [default]: unmarshalled attribute (ID: sn) with 1 value<br>2024-06-19 11:37:37 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [2] [default]: validating input<br>2024-06-19 11:37:37 DEBUG OpenSAML.MessageEncoder.SAML2 [2] [default]: tracking request (_1dbbd5a7c2ca89706685e05da9e5ef0c) against RelayState token (corr:1718789857_be18)<br>2024-06-19 11:37:37 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [2] [default]: marshalling, deflating, base64-encoding the message<br>2024-06-19 11:37:37 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [2] [default]: signing the message<br>2024-06-19 11:37:37 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [2] [default]: message encoded, sending redirect to client<br>2024-06-19 11:37:37 INFO Shibboleth.SessionCache [2] [default]: removed session (_02341065cf0311611fa4e105bcfcff91)<br>2024-06-19 11:37:37 DEBUG XMLTooling.StorageService [2] [default]: inserted record (_02341065cf0311611fa4e105bcfcff91) in context (Revoked) with expiration (1718818654)<br>2024-06-19 11:44:42 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage<br></div><div><br></div></div>
<br>
<p><img src="https://www.uninettunouniversity.net/data/skins/uninettunonew/img/5x1000.png"></p>