Infinite redirect loop when specifying SP, in CodeIgniter app.

[adam wilson]

Hello,

Working on the final stages of integrating SImpleSAML into a CodeIgniter Application.

When I specify a SP defined in authsources, using the SimpleSAML_Auth_Simple function (which works fine when 'sp-default' is used (with nil values) and the user selects the SP from the dropdown)
I get an infinite loop of redirects, jumping from the requireAuth function.

I have compared details and it all seems to add up..

Could it be a session issue? Do I need to use memcache? (would want to avoid restarting Apache on server during working hours..)

Any help would be greatly appreciated.

Thanks
Adam

[Olav Morken]

On Tue, Feb 25, 2014 at 05:02:42 -0800, adam wilson wrote:
> Hello,
>
> Working on the final stages of integrating SImpleSAML into a CodeIgniter
> Application.
>
> When I specify a SP defined in authsources, using the
> SimpleSAML_Auth_Simple function (which works fine when 'sp-default' is used
> (with nil values) and the user selects the SP from the dropdown)
> I get an infinite loop of redirects, jumping from the requireAuth function.
>
> I have compared details and it all seems to add up..
>
> Could it be a session issue?

It could be an session issue, but it doesn't have to be. You really
look at the request log and examine what happens at each step, and what
session ID is in use.

> Do I need to use memcache? (would want to
> avoid restarting Apache on server during working hours..)

Memcache is easy for solving the problem when there is a conflict
between your applications use of PHP session and SimpleSAMLphp's use.
Note that Apache shouldn't need to be restarted -- this is a
configuration setting in SimpleSAMLphp.

Best regards,
Olav Morken
UNINETT / Feide

[adam wilson]

Turns out the mistake was in the metadata that the IdP was holding - I had not asked them to update when I changed the SP name. 

Thanks

Adam

--
You received this message because you are subscribed to a topic in the Google Groups "simpleSAMLphp" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/simplesamlphp/iLoeZh8FVmk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to simplesamlph...@googlegroups.com.
To post to this group, send email to simple...@googlegroups.com.
Visit this group at http://groups.google.com/group/simplesamlphp.
For more options, visit https://groups.google.com/groups/opt_out.