WordPress.org

1. chalemic
   Member
   Posted 1 year ago #

   I'm setting up our WP 3.0 site and having trouble with configuring it to work with Shibboleth. I've added a rewrite using IIS7's module that matches on ^Shibboleth\.sso/, takes no action, and stops processing. It successfully takes to the IdP for login and my Shibboleth logs show a completed transaction with properties set.

   After logging in I get an infinite loop of redirects:

   1. 1. POST Shibboleth.sso/SAML2/POST, 302 Moved to wp-login.php?action=shibboleth&redirect_to=%2Fwp-login.php
   2. 2. GET wp-login.php?action=shibboleth&redirect_to=%2Fwp-login.php Refreshes to Shibboleth.sso/Login?target=http%3A%2F%2Fsites.warrington.ufl.edu%2Fwp-login.php%3Faction%3Dshibboleth%26redirect_to%3D%252Fwp-login.php
   3. 3. GET Shibboleth.sso/Login?target=http%3A%2F%2Fsites.warrington.ufl.edu%2Fwp-login.php%3Faction%3Dshibboleth%26redirect_to%3D%252Fwp-login.php, 302 Moved to Shibboleth IdP

   I see that the refresh in step 2 is what's causing the problem, but I don't understand why wp-login.php?action=shibboleth&redirect_to=%2Fwp-login.php refreshes the way it does.

   Any ideas on which part of my configuration would cause this?

   Thanks!

2. tsikorski
   Member
   Posted 1 year ago #

   Hi,
   I was getting the same symptom using apache.

   I changed line 130 in the file shibboleth.php to read:

   $session_headers = array('Shib_Session_ID', 'HTTP_SHIB_IDENTITY_PROVIDER');

   instead of

   $session_headers = array
   ('Shib-Session-ID', 'HTTP_SHIB_IDENTITY_PROVIDER');

   That seemed to fix things for me.

3. chalemic
   Member
   Posted 1 year ago #

   Upon further investigation Shibboleth doesn't appear to be returning headers to WordPress. When I check the Session and transaction log everything appears fine, but I do see errors when I restart the service, isapi_shib_extension: socket call resulted in error (10054): Unknown error.

4. chalemic
   Member
   Posted 1 year ago #

   The problem was in my configuration file; the loop is now gone (but I'm working on other problems.)

Topic Closed

This topic has been closed to new replies.