OpenConext / Stepup-Gateway

Stepup Gateway
Apache License 2.0
6 stars 3 forks source link

Reason for ART #3678 errors on gateway #408

Open phavekes opened 11 hours ago

phavekes commented 11 hours ago

This issue is imported from pivotal - Originaly created at Nov 3, 2016 by Pieter van der Meulen

Logging shows that users get an occasional #3678 error at the gateway. It is the 4th common error that users get. What causes this error?

The trace for the error is the same in each case:

Uncaught PHP Exception Surfnet\SamlBundle\Exception\InvalidArgumentException: "Invalid Argument, parameter "requestId" should be of type "string", "NULL" given" at /opt/stepup/Stepup-Gateway-2.2.0-20161018092553Z-bc6bbf8e2006d15cbe883d8045724cdb1166e759/vendor/surfnet/stepup-saml-bundle/src/Exception/InvalidArgumentException.php line 27

This exception is thrown by: https://github.com/SURFnet/Stepup-saml-bundle/blob/2.2.0/src/Monolog/SamlAuthenticationLogger.php#L54

Which is used at five locations from the gateway code: https://github.com/SURFnet/Stepup-Gateway/search?utf8=%E2%9C%93&q=forAuthentication

The error occurs when a user is redirected back from the remote IdP (i.e. engine.surfconext.nl) using SAML POST binding.