Re: [VuFind-Tech] Shibboleth Login -> Redirect to MyResearch/Home

[Cornelius A. <cor...@bs...>]

Hi Demian,

first enjoy your vacation! I think you should be able to reproduce it.

The sessionInitiator called in header.phtml and printing the "Login" 
link returns /Shibboleth.sso/Login. So the referer is not saved saved.

The referer is saved in /MyResearch/Login action, so I guess other auth 
methods are pointing here first? Just place a dump here to see the saved 
referer.

Cornelius




Am 16.02.2017 um 17:06 schrieb Demian Katz:
> Cornelius,
>
>
> I'll try to give this another look when I get back from vacation next
> week. Unfortunately, since I don't have a Shibboleth instance to test
> with, I can only simulate the workflow, so that may be the reason I'm
> not seeing the same problem that you describe. I'd be very interested to
> hear from other Shibboleth users. I was really under the impression that
> we had gotten this problem sorted out, but because it's so hard for me
> to test, it's certainly possible that something has gone wrong....
>
>
> - Demian
>
>
>
> ------------------------------------------------------------------------
> *From:* Cornelius Amzar <cor...@bs...>
> *Sent:* Thursday, February 16, 2017 10:11 AM
> *To:* Demian Katz; vuf...@li...; Winkler, Stefan
> *Subject:* Re: [VuFind-Tech] Shibboleth Login -> Redirect to
> MyResearch/Home
>
> Hi Demian,
>
> You're right. The referer is saved in MyResearch/Login action. The
> problem is Shibboleth uses an external login page (the IdP). The url is
> set in config.ini, section Shibboleth, parameter login. It's default
> points to /Shibboleth.sso/Login which is not under control of VuFind.
>
> So, there is no link pointing to /MyResearch/Login and then redirects to
> /Shibboleth.sso/Login. That's why no referer is saved.
>
> Seems to be a bug still open in current master, as the
> Shibboleth.sso/Login is still there.
>
> Regards,
> Cornelius
>
>
>
> Am 13.02.2017 um 16:08 schrieb Demian Katz:
>> Cornelius,
>>
>> My understanding about how this is supposed to work is that, when a login prompt is triggered, VuFind should store the referring page in the user's session. When Shibboleth returns control to VuFind by redirecting to MyResearch/Home, that should complete the login process and then redirect the user back to the original
> referring page.
>>
>> I know that there have been some Shibboleth-related glitches in the history of VuFind, and I can't remember exactly what has changed since release 2.5 -- but that's at least my understanding of what should be happening.
>>
>> If you still need help following that basic conceptual overview, I can look back at the 2.5 code and point you in the direction of where you could try debugging....
>>
>> - Demian
>>
>> -----Original Message-----
>> From: Cornelius Amzar [mailto:cor...@bs...]
>> Sent: Monday, February 13, 2017 8:35 AM
>> To: vuf...@li...; Winkler, Stefan
>> Subject: [VuFind-Tech] Shibboleth Login -> Redirect to MyResearch/Home
>>
>> Hello everybody,
>>
>> we're still running VuFind 2.5 and testing Shibboleth right now.
>>
>> After the login, the user is redirected to MyResearch/Home. If we configure another target, the login is not processed properly.
>>
>> The question: Is it possible to send the user back to the page that he/she visited when clicking the Login button? That would be much nicer.
>> And is a default behavior in most web applications I know.
>>
>> Thanks for any suggestions!
>>
>> Cornelius
>> --
>> Cornelius Amzar, M.Sc.
>> Bibliotheksservice-Zentrum Baden-Württemberg (BSZ)
>> 78457 Konstanz / Germany
>> E-Mail: cor...@bs...
>> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bsz-bw.de&data=02%7C01%7Cdemian.katz%40villanova.edu%7C3d812c2281b34713245708d4541820cd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636225910000543626&sdata=MPuHpvK0E9nFyB62%2FI6Dzb2CmiaNsmvafTsxuLe07fg%3D&reserved=0
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsdm.link%2Fslashdot&data=02%7C01%7Cdemian.katz%40villanova.edu%7C3d812c2281b34713245708d4541820cd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636225910000543626&sdata=PW83oAmLefWc5s9XHZOLeaRwbe%2FGBcCZY4MhAwX%2F4wU%3D&reserved=0
>> _______________________________________________
>> Vufind-tech mailing list
>> Vuf...@li...
>> https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fvufind-tech&data=02%7C01%7Cdemian.katz%40villanova.edu%7C3d812c2281b34713245708d4541820cd%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636225910000543626&sdata=Ghf9CgwM%2BYcbdpsgAeel2OiIhp%2BWbqgYZ2YrLolpqT0%3D&reserved=0
>>
>
> --
> Cornelius Amzar, M.Sc.
> Bibliotheksservice-Zentrum Baden-Württemberg (BSZ)
> 78457 Konstanz / Germany
> E-Mail: cor...@bs...
> https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bsz-bw.de&data=02%7C01%7Cdemian.katz%40villanova.edu%7C8b47c6091dc64ca9cd7508d4567f88f5%7C765a8de5cf9444f09cafae5bf8cfa366%7C1%7C0%7C636228553159034140&sdata=dkxDHGG9eYGHW37cOoDZn2NP1XzDgUk1d9JURLwy5y0%3D&reserved=0

-- 
Cornelius Amzar, M.Sc.
Bibliotheksservice-Zentrum Baden-Württemberg (BSZ)
78457 Konstanz / Germany
E-Mail: cor...@bs...
http://www.bsz-bw.de