Shibboleth Developers

["RL 'Bob' Morgan" <>]

On Fri, 6 Jun 2003 

 wrote:

> >  my origin is using a bossie cert.......
>
> At 4:11 PM -0400 6/6/03, Derek Atkins wrote:
> >Ok, so it's working now?
> >
> yes.....
>
> altho it would be nice to get a second verification......

Well, it's still not working for me.  In fact it's really weird.  My
target trust.xml just has an entry for HEPKI Master (aka bossie), for
incommon:pilot.  My origin is now using a HEPKI Server CA-issued cert.

When I go to the target and take the trip via the HS, upon return the
browser hangs at the "Shibboleth Handle Request Processed" page from the
HS.  The shar, in at least some cases and maybe all, segfaults.  *But* (in
at least some cases and maybe all), a new shar appears, or at least ps
shows a shar with a different pid now running.  Trying to kill that shar
process with ordinary "kill" doesn't work.  "kill -9" sometimes seems to
kill it outright, and sometimes seems to produce another shar with another
pid.  Am I nuts?

I just tried going to Steven's shib test
(http://pluto.services.brown.edu/shib-test/), went thru the WAYF ... and
hung at the HS again.  I bet the shar on pluto is hung or crashed.  Do I
have the Origin From Hell?

shar.log shows, before the crash/hang:

[... printout of the authn assertion ...]
2003-06-06 16:33:10 DEBUG shibtarget.rpc-server [0] new_session: Get the
SSOAssertion
2003-06-06 16:33:10 DEBUG shibtarget.rpc-server [0] new_session: check
replay cache
2003-06-06 16:33:10 DEBUG shibtarget.rpc-server [0] new_session: get
SSOStatement
2003-06-06 16:33:10 INFO shibtarget.rpc-server [0] new_session: Creating
new session
2003-06-06 16:33:10 DEBUG shibtarget.InternalCCache [0] new_session:
caching new entry for "d405b601fd49f7c74c99c3f10e97aac3"

 - RL "Bob"


------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--