500 internal server error after authentication (geting to /saml/sp/saml2-acs.php/default-sp)

[Ali Faisal]

Guys,

Running into some issues after authenticating from IDP, I am getting the response back just fine with all the attributes, from looking at the logs. As soon as the response comes back a 500 Internal Server is thrown without any errors in logs. Any idea whats the best way to debug issues like it?  This is the url https://my.web.site/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp with the internal server error

Thanks for any help in the right direction.

[shoaib ali]

Hi Ali,

What version of PHP are you running? Can you please check you have 
turned error logging on and are set to appropriate verbosity level. I 
presume you are on standard apache2.

Please make sure you have all the per-requisites installed. See here 
http://simplesamlphp.org/docs/stable/simplesamlphp-install#section_3

Also, check that you have mem_cache module installed and memcached is running.

[Ali Faisal]

I am running 5.5. Everything is green on SimpleSaml dash board. I did some debugging and it looks like there are some issues resolving class name. This is where its not coming back in Module.php

 if (!class_exists($className)) {

                        throw new Exception('Could not resolve \'' . $id .

                                '\': No class named \'' . $className . '\'.');

                } elseif ($subclass !== NULL && !is_subclass_of($className, $subclass)) {

                        SimpleSAML_Logger::debug('SubClass Does Not exist');

                        throw new Exception('Could not resolve \'' . $id . '\': The class \'' .

                                $className . '\' isn\'t a subclass of \'' . $subclass . '\'.');

                }

Class name that it is building with  $className = 'sspmod_' . $tmp[0] . '_' . $type . '_' . $tmp[1]; is sspmod_saml_Auth_Source_SP. I am confuse if this is something that can cause it to not work. 

[Ali Faisal]

Did some more debuging and looks like when a class_exist is ran on  "sspmod_core_Auth_Process_GenerateGroups" everything stops right there and then, no more processing and no errors. in the config for authproc.sp added  50 => 'core:GenerateGroups' without any success! 

Do I have to configure anything for generate groups?

class_exists("sspmod_core_Auth_Process_GenerateGroups")

[shoaib ali]

This is interesting, so you reckon it is failing to load the class. I can't think of anything else that might be causing this although one suggestion I would make is to not use PHP 5.5. I presume you are using wamp on a windows box as such. Try an older version of php like 5.3.x. It *shouldn't* make any difference in theory, just a suggestion worth trying. Doesn't take long to switch php versions in wamp.

[Ali Faisal]

No I have it running on Linux. Thinking about doing a complete reinstall of SimpleSAML.

[Ali Faisal]

Removing 60 => array('class' => 'core:GenerateGroups', 'eduPersonAffiliation'), from config.php solved it. 

[Pooja Ambre]

Hello Faisal,

I am facing a similar issue. I get a 500 Internal server error on https://hostname/www/module.php/saml/sp/saml2-acs.php/default-sp page. 

I am using SAMLPHP 1.11.0 and ADFS 2.0. Can you please advise how can I troubleshoot this. The solution you used is not working for me. Thanks in advance.

-Pooja

[Peter Schober]

* Pooja Ambre <pooja...@gmail.com> [2013-11-08 10:17]:

> I am facing a similar issue. I get a 500 Internal server error on
> https://hostname/www/module.php/saml/sp/saml2-acs.php/default-sp page.

Not all "500 Internal server error"s are created equally.
The usual advise is to look though your webserver logs,
-peter

[Stuart Buckell]

We are getting the same problem - random 500 error.  Restarting the web server resolves it, so we will debug further

[ashish kushwaha]

[ashish kushwaha]

HI Faisal

@500 internal server error , by removing "60 => array('class' => 'core:GenerateGroups', 'eduPersonAffiliation')," it solved .

Thanks
Ashish

On Thursday, 7 November 2013 03:32:09 UTC+5:30, Ali Faisal wrote: