test setup of version 2.0.6 gives an error

[Vladimir Khomoutov]

test setup of version 2.0.6 gives an error


Hello everyone,
I setup IdP and SP for testing with exampleauth. I followed documentation.
Running test:
1. Open Test tab.
2. Choose default-sp
3. Choose IdP
4. Redirect to IdP
5. Login as "student"
User successfully authenticated. And it gives the error after. Here is what I have in IdP simplesamlphp.log file:

Oct 20 09:32:21 simplesamlphp NOTICE STAT [f0180d4657] User 'student' successfully authenticated from [some ip address]
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] SimpleSAML\Error\Error: UNHANDLEDEXCEPTION
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] Backtrace:
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 2 /var/sftp/idp/src/SimpleSAML/Error/ExceptionHandler.php:32 (SimpleSAML\Error\ExceptionHandler::customExceptionHandler)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 1 /var/sftp/idp/vendor/symfony/error-handler/ErrorHandler.php:537 (Symfony\Component\ErrorHandler\ErrorHandler::handleException)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 0 [builtin] (N/A)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] Caused by: Exception: Invalid attribute name given to core:StatisticsWithAttribute filter.
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] Backtrace:
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 14 /var/sftp/idp/modules/core/src/Auth/Process/StatisticsWithAttribute.php:51 (SimpleSAML\Module\core\Auth\Process\StatisticsWithAttribute::__construct)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 13 /var/sftp/idp/src/SimpleSAML/Auth/ProcessingChain.php:172 (SimpleSAML\Auth\ProcessingChain::parseFilter)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 12 /var/sftp/idp/src/SimpleSAML/Auth/ProcessingChain.php:142 (SimpleSAML\Auth\ProcessingChain::parseFilterList)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 11 /var/sftp/idp/src/SimpleSAML/Auth/ProcessingChain.php:75 (SimpleSAML\Auth\ProcessingChain::__construct)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 10 /var/sftp/idp/src/SimpleSAML/IdP.php:334 (SimpleSAML\IdP::postAuth)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 9 /var/sftp/idp/src/SimpleSAML/Auth/Source.php:237 (SimpleSAML\Auth\Source::loginCompleted)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 8 /var/sftp/idp/src/SimpleSAML/Auth/Source.php:159 (SimpleSAML\Auth\Source::completeAuth)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 7 /var/sftp/idp/modules/core/src/Auth/UserPassBase.php:313 (SimpleSAML\Module\core\Auth\UserPassBase::handleLogin)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 6 /var/sftp/idp/modules/core/src/Controller/Login.php:216 (SimpleSAML\Module\core\Controller\Login::handleLogin)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 5 /var/sftp/idp/modules/core/src/Controller/Login.php:114 (SimpleSAML\Module\core\Controller\Login::loginuserpass)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 4 /var/sftp/idp/vendor/symfony/http-kernel/HttpKernel.php:182 (Symfony\Component\HttpKernel\HttpKernel::handleRaw)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 3 /var/sftp/idp/vendor/symfony/http-kernel/HttpKernel.php:76 (Symfony\Component\HttpKernel\HttpKernel::handle)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 2 /var/sftp/idp/vendor/symfony/http-kernel/Kernel.php:197 (Symfony\Component\HttpKernel\Kernel::handle)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 1 /var/sftp/idp/src/SimpleSAML/Module.php:228 (SimpleSAML\Module::process)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] 0 /var/sftp/idp/public/module.php:17 (N/A)
Oct 20 09:32:21 simplesamlphp ERROR [f0180d4657] Error report with id 492e94e7 generated.
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] SimpleSAML\Error\BadRequest: BADREQUEST('%REASON%' => 'Missing AuthState parameter.')
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] Backtrace:
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 5 /var/sftp/idp/modules/core/src/Controller/Login.php:99 (SimpleSAML\Module\core\Controller\Login::loginuserpass)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 4 /var/sftp/idp/vendor/symfony/http-kernel/HttpKernel.php:182 (Symfony\Component\HttpKernel\HttpKernel::handleRaw)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 3 /var/sftp/idp/vendor/symfony/http-kernel/HttpKernel.php:76 (Symfony\Component\HttpKernel\HttpKernel::handle)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 2 /var/sftp/idp/vendor/symfony/http-kernel/Kernel.php:197 (Symfony\Component\HttpKernel\Kernel::handle)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 1 /var/sftp/idp/src/SimpleSAML/Module.php:228 (SimpleSAML\Module::process)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] 0 /var/sftp/idp/public/module.php:17 (N/A)
Oct 20 09:32:22 simplesamlphp ERROR [611769cf34] Error report with id 92e33de7 generated.

Could anybody suggest how to debug, what to check in config etc,
Thank you

[pra...@gmail.com]

How did you install SSP?

I believe there is a bug in `StatisticsWithAttribute` that is in the master branch in git which would give that error, but that bug isn't present in SSP 2.0.6

- Patrick

[Vladimir Khomoutov]

Thank you Patrick,

I cloned SSP from github. That is a good idea to download the package. 

Vlad

[Vladimir Khomoutov]

The issue was solved.

1. I installed SSP version 1.19.8. by following the documentation for that version. Configured IdP and SP. Tested. 

2. On v 1.19.8 IdP opened Federation tab, showed Metadata for IdP and copied dedicated URL to get the metadata xml.

3. Then on version 2.0.6 for IdP I opened saml20-idp-hosted.php and replaced

$metadata['urn:x-simplesamlphp:example-idp']

with

$metadata['https://{my-site-url}/simplesaml/saml2/idp/metadata.php'] 

It may be for those who lives inside simplesamlphp project it is obvious but for a newbie it has taken a couple of days to create a working project.

Nevertheless thank you all for creating simplesamlphp. 

Vlad