SAML SP SOAP logout does not happen
when trying SOAP logout to SP (from LemonLDAP::NG IdP portal), logout does not occur. With HTTP-REDIRECT, it is working.
Error is:
[Thu May 26 11:10:46.242094 2016] [perl:debug] [pid 10938] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Lasso Session loaded
[Thu May 26 11:10:46.242652 2016] [perl:debug] [pid 10938] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: SLO request will not be signed
[Thu May 26 11:10:46.242752 2016] [perl:debug] [pid 10938] CGI.pm(114): /usr/share/perl5/vendor_perl/Lemonldap/NG/Portal/_SAML.pm 2521:
[Thu May 26 11:10:46.242771 2016] [perl:error] [pid 10938] Unable to create SAML request
{code}
The problem seems to reside in _SAML.pm in function when trying SOAP logout to SP (from LemonLDAP::NG IdP portal), logout does not occur.
With HTTP-REDIRECT, it is working.
Error is:
{code}
[Thu May 26 11:10:46.242094 2016] [perl:debug] [pid 10938] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: Lasso Session loaded
[Thu May 26 11:10:46.242652 2016] [perl:debug] [pid 10938] CGI.pm(115): Lemonldap::NG::Portal::SharedConf: SLO request will not be signed
[Thu May 26 11:10:46.242752 2016] [perl:debug] [pid 10938] CGI.pm(114): /usr/share/perl5/vendor_perl/Lemonldap/NG/Portal/_SAML.pm 2521:
[Thu May 26 11:10:46.242771 2016] [perl:error] [pid 10938] Unable to create SAML request
{code}
The problem seems to reside in _SAML.pm in function sendLogoutRequestToProvider:
{code}
# Build the request unless this is a SOAP relay logout request
unless ( $method == Lasso::Constants::HTTP_METHOD_SOAP && $relay ) {
{code}
when bypassing this condition, this leads to another error:
{code}
No session and identity found into logout object
{code}
When trying to debug $logout, it happens not to be built in the situation of a SOAP relay request:
{code}
<lasso:Logout xmlns:lasso="http://www.entrouvert.org/namespaces/lasso/0.0" LogoutDumpVersion="2 >
<lasso:HttpRequestMethod>0</lasso:HttpRequestMethod
<lasso:InitialHttpRequestMethod>-1</lasso:InitialHttpRequestMethod
</lasso:Logout>