| << Back to previous view |
|
[QB-3758] Get Error when Signout via SSO Login(via SAML).
|
|
| Status: | Closed |
| Project: | QuickBuild |
| Component/s: | None |
| Affects Version/s: | 10.0.15 |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Major |
| Reporter: | Cheolhee Jeon | Assigned To: | Robin Shen |
| Resolution: | Won't Fix | Votes: | 0 |
| Remaining Estimate: | Unknown | Time Spent: | Unknown |
| Original Estimate: | Unknown | ||
| Environment: | Ubuntu16.04 | ||
| Description |
|
Hello,
First, Thx for the last advise. It worked 'Login with SSO by SAML'. But, I've got a bug with Signout, then. If I login with SSO and after few minutes(I guess more than 3mins.), when I click sign out and then try re-login with SSO then it shows me an error pages. here's the message below. Message: invalid_response The Response has an InResponseTo attribute: ONELOGIN_bbcd54f4-c5aa-434e-9185-6d41293f354d while no InResponseTo was expected Root cause: com.pmease.quickbuild.QuickbuildException: invalid_response The Response has an InResponseTo attribute: ONELOGIN_bbcd54f4-c5aa-434e-9185-6d41293f354d while no InResponseTo was expected at com.pmease.quickbuild.plugin.ssoprovider.saml.SamlProvider.processLoginResponse(SamlProvider.java:165) at com.pmease.quickbuild.plugin.ssoprovider.saml.SamlProvider$$EnhancerByCGLIB$$11703b4.CGLIB$processLoginResponse$19(<generated>) at com.pmease.quickbuild.plugin.ssoprovider.saml.SamlProvider$$EnhancerByCGLIB$$11703b4$$FastClassByCGLIB$$76643973.invoke(<generated>) at net.sf.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:215) at com.pmease.quickbuild.DefaultScriptEngine$Interpolator.intercept(DefaultScriptEngine.java:261) at com.pmease.quickbuild.plugin.ssoprovider.saml.SamlProvider$$EnhancerByCGLIB$$11703b4.processLoginResponse(<generated>) at com.pmease.quickbuild.web.page.SSOLoginPage.<init>(SSOLoginPage.java:36) at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:177) at org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:68) at org.apache.wicket.session.DefaultPageFactory.newPage(DefaultPageFactory.java:47) at org.apache.wicket.DefaultMapperContext.newPageInstance(DefaultMapperContext.java:103) at org.apache.wicket.request.handler.PageProvider.getPageInstance(PageProvider.java:273) at org.apache.wicket.request.handler.PageProvider.getPageInstance(PageProvider.java:167) at org.apache.wicket.request.handler.render.PageRenderer.getPage(PageRenderer.java:78) at org.apache.wicket.request.handler.render.WebPageRenderer.renderPage(WebPageRenderer.java:105) at org.apache.wicket.request.handler.render.WebPageRenderer.respond(WebPageRenderer.java:182) at org.apache.wicket.request.handler.RenderPageRequestHandler.respond(RenderPageRequestHandler.java:147) at org.apache.wicket.request.cycle.RequestCycle$HandlerExecutor.respond(RequestCycle.java:719) at org.apache.wicket.request.RequestHandlerStack.execute(RequestHandlerStack.java:63) at org.apache.wicket.request.cycle.RequestCycle.processRequest(RequestCycle.java:210) at org.apache.wicket.request.cycle.RequestCycle.processRequestAndDetach(RequestCycle.java:253) at org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:162) at org.apache.wicket.protocol.http.WicketServlet.doPost(WicketServlet.java:159) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at com.pmease.quickbuild.web.MainServlet.service(MainServlet.java:135) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at org.eclipse.equinox.http.helper.FilterServletAdaptor$FilterChainImpl.doFilter(FilterServletAdaptor.java:56) at org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:83) at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:365) at org.eclipse.equinox.http.helper.FilterServletAdaptor.service(FilterServletAdaptor.java:37) at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:812) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1669) at com.pmease.quickbuild.Quickbuild$DisableTraceFilter.doFilter(Quickbuild.java:1187) at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1652) at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:585) at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127) at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515) at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:110) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97) at org.eclipse.jetty.server.Server.handle(Server.java:499) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:258) at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635) at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555) at java.lang.Thread.run(Thread.java:748) Could you help me with this? Thanks, Nick. |
| Comments |
| Comment by Robin Shen [ 15/Jul/21 01:41 AM ] |
|
This normally happens when the url currently accessing is not the same as registered at SAML side. Please make sure all of below are the same:
1. The server url specified in system setting 2. The url you are visiting 3. The url you registered at SAML side (plus various suffix such as "sso-login" and "saml" of course) |
| Comment by Cheolhee Jeon [ 16/Jul/21 06:38 AM ] |
|
Hello, Robin
Thanks for quick reply. :) I have one quick question about no.3. Do you mean suffix "sso-login" and "saml" both should registered at SAML side? (ex. registered url: quickbuild.xxx.xxx.xxx.com/sso-login , quickbuild.xxx.xxx.xxx.com/saml) If this right, then yes, I did registered both. Could you tell me more specific about no.1 ? Which system setting that should I set? Thanks, Nick |
| Comment by Robin Shen [ 16/Jul/21 09:46 AM ] |
| Yes both should be registered. For no.1, please specify server url in system setting the same as the prefix you registered at SAML side, that is: http://quickbuild.xxx.xxx.xxx.com. And you also need to visit QB via this url from browser. |