SimpleSAML_Error_Error: UNHANDLEDEXCEPTION

[Salil Lambay]

We have deployed simplesamlphp plugin into one of our production application and have started facing an issue, when a user tries to login he gets to see a page

I have enabled the debug log and this is the piece from the logs

Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] Loading state: '_bae4dbe6d54c01f939321b1652c48c3d859f2b1aab'
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] Received SAML2 Response from 'https://xyz.abc.com:443/pqr'.
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] SimpleSAML_Error_Error: UNHANDLEDEXCEPTION
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] Backtrace:
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] 0 E:\wamp\www\AuthSP\www\module.php:180 (N/A)
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] Caused by: sspmod_saml_Error: Responder
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] Backtrace:
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] 3 E:\wamp\www\AuthSP\modules\saml\lib\Message.php:392 (sspmod_saml_Message::getResponseError)
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] 2 E:\wamp\www\AuthSP\modules\saml\lib\Message.php:499 (sspmod_saml_Message::processResponse)
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] 1 E:\wamp\www\AuthSP\modules\saml\www\sp\saml2-acs.php:120 (require)
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] 0 E:\wamp\www\AuthSP\www\module.php:137 (N/A)
Jan 09 09:15:11 simplesamlphp ERROR [b2cdbc1457] Error report with id bdbd09a1 generated.
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] Template: Reading [E:\wamp\www\AuthSP\dictionaries/errors]
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] Received message:
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] <samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" ID="s255954b636186ae0f380f8472aca404e887cf726b" InResponseTo="_bae4dbe6d54c01f939321b1652c48c3d859f2b1aab" Version="2.0" IssueInstant="2017-01-09T14:15:11Z">
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://xyz.abc.com:443/openam</saml:Issuer>
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] <samlp:Status xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] <samlp:StatusCode xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/>
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] </samlp:Status>
Jan 09 09:15:11 simplesamlphp DEBUG [b2cdbc1457] </samlp:Response>

Could anyone tell me what is the excat issue and how can i resolve this

[Salil Lambay]

This is the error logged at the IDP end :

libPlugins:01/09/2017 09:17:30:563 AM EST: Thread[http-nio-149.25.153.123-443-exec-10,5,main]

FMSessionProvider.getSession: Could not get the session from the HTTP request: Invalid session ID.

[Jaime Perez Crespo]

Hi Salil,

On 10 Jan 2017, at 07:19 AM, Salil Lambay <lambay...@gmail.com> wrote:
> This is the error logged at the IDP end :
>
> libPlugins:01/09/2017 09:17:30:563 AM EST: Thread[http-nio-149.25.153.123-443-exec-10,5,main]
> FMSessionProvider.getSession: Could not get the session from the HTTP request: Invalid session ID.

That’s not related to SimpleSAMLphp or your SP in any way, so I’m afraid there’s not much you can do. The only thing I can recommend you is to try to reproduce the problem, and use the SAMLtracer firefox plugin to trace the SAML & HTTP exchange and see if there’s something wrong in there, but it looks like this is the IdP’s food.

--
Jaime Pérez
UNINETT / Feide

jaime...@uninett.no
jaime...@protonmail.com
9A08 EA20 E062 70B4 616B 43E3 562A FE3A 6293 62C2

"Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference."
- Robert Frost

[asmith...@gmail.com]

Hi,

I am trying to enable simplesamlphp to authenticate users against linotp. However, I am getting the following error when I want to test it:

SimpleSAML_Error_Error: UNHANDLEDEXCEPTION

Backtrace:
0 /var/simplesamlphp/www/module.php:180 (N/A)
Caused by: Exception: Could not resolve 'linotp2:linotp2': No class named 'sspmod_linotp2_Auth_Source_linotp2'.
Backtrace:
6 /var/simplesamlphp/lib/SimpleSAML/Module.php:152 (SimpleSAML_Module::resolveClass)
5 /var/simplesamlphp/lib/SimpleSAML/Auth/Source.php:298 (SimpleSAML_Auth_Source::parseAuthSource)
4 /var/simplesamlphp/lib/SimpleSAML/Auth/Source.php:343 (SimpleSAML_Auth_Source::getById)
3 /var/simplesamlphp/lib/SimpleSAML/Auth/Simple.php:36 (SimpleSAML_Auth_Simple::getAuthSource)
2 /var/simplesamlphp/lib/SimpleSAML/Auth/Simple.php:140 (SimpleSAML_Auth_Simple::login)
1 /var/simplesamlphp/modules/core/www/authenticate.php:40 (require)
0 /var/simplesamlphp/www/module.php:137 (N/A)

Any idea what is wrong? 

Thanks.

[Peter Schober]

* <asmith...@gmail.com> [2017-01-19 21:55]:

> I am trying to enable simplesamlphp to authenticate users against linotp.
> However, I am getting the following error when I want to test it:
>
> SimpleSAML_Error_Error: UNHANDLEDEXCEPTION
>
> Backtrace:
> 0 /var/simplesamlphp/www/module.php:180 (N/A)
> Caused by: Exception: Could not resolve 'linotp2:linotp2': No class named 'sspmod_linotp2_Auth_Source_linotp2'.

Well, did you install and/or activate the linotp2 module (whatever that is)?
-peter