Re: [Suspected SPAM] Re: [EXTERNAL] Re: ADFS SSO Authentication

["MARTINEZ, ARIEL" <AM...@hostos.cuny.edu>]

I think I might have figured out the issue. Undefined offset: 5 seems to refer that element 5 in the array does not exist. So I looked at the tmparr[] in authentication.php  and to confirm, I output to the error log the value of tmparr[4] and tmparr[5], 4 is correct, and 5 is empty. The array is only of size 4.

I changed the code that sets $shibauthed to $tmparr[4], and everything seems to be working now.  

if(count($tmparr) > 4) {
		$shibauthed = $tmparr[4]; 


I am not sure if this would affect anything else, or if this is just a specific error in our setup, but hopefully this narrows things down considerably for your review.

Thanks
________________________________________
From: MARTINEZ, ARIEL
Sent: Wednesday, September 30, 2020 5:22 PM
To: Josh Thompson
Cc: user@vcl.apache.org
Subject: Re: [Suspected SPAM] Re: [EXTERNAL] Re: ADFS SSO Authentication

Hi Josh,

Thanks for that, I was able to get the log information, in short, yes, variables from line 94 are being output to the log:

Sep 30 17:13:13 hccVCLWeb01 shibboleth: tmp: >amartinez@HOSTOSCUNY|10.32.14.218|1601536222|shibboleth|11<



Sep 30 17:13:13 hccVCLWeb01 shibboleth: PHP Notice:  Undefined offset: 5 in /var/www/html/vcl-2.5.1/.ht-inc/authentication.php on line 111
Sep 30 17:13:13 hccVCLWeb01 shibboleth: You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' at line 1#012SELECT ts FROM shibauth WHERE id = #012ERROR(101): General MySQL error#012Mode was viewRequests#012#012#012Backtrace:#012=-=-=-=-=-=-=-=-=-=-=-=#012Call#:1 => index.php:initGlobals() (line#:60)#012Call#:2 => utils.php:readAuthCookie() (line#:172)#012Call#:3 => authentication.php:doQuery() (line#:115)#012#012Backtrace with Arguments:#012=-=-=-=-=-=-=-=-=-=-=-=#012Call#:1 => index.php:initGlobals() (line#:60)#012Arguments(none):#012-----------------------#012Call#:2 => utils.php:readAuthCookie() (line#:172)#012Arguments(none):#012-----------------------#012Call#:3 => authentication.php:doQuery() (line#:115)#012Arguments(2)#012#012Argument#: 1 => SELECT ts FROM shibauth WHERE id = #012Argument#: 2 => 101#012-----------------------
Sep 30 17:13:13 hccVCLWeb01 shibboleth: PHP Fatal error:  Call to undefined function getFooter() in /var/www/html/vcl-2.5.1/.ht-inc/utils.php on line 14234

________________________________________
From: Josh Thompson <jo...@ncsu.edu>
Sent: Wednesday, September 30, 2020 12:42 PM
To: MARTINEZ, ARIEL
Cc: user@vcl.apache.org
Subject: Re: [Suspected SPAM] Re: [EXTERNAL] Re: ADFS SSO Authentication

Hi Ariel,

Sorry, I assumed the errors you included before were from a php error log.  By
default, I think logging of errors is off.  You'll need to modify php.ini to
enable logging.  Modify /etc/php.ini and configure it to log to syslog.
You'll also need to ensure log_errors is set to On.

log_errors = On
error_log = syslog

httpd will need to be restarted after saving the changes to php.ini

Josh

On Tuesday, September 29, 2020 5:08:55 PM EDT you wrote:
> Hi Josh,
>
> I added the line but could not find where php would be logging the errors.
> It wasn't inside of /var/log/httpd and I didn't find anything php specific
> outside. In a default installation, where would this be logged to?

> I checked Shib_Session_ID after the error and it is populated.
>
> Thanks
>
> -----Original Message-----
> From: Josh Thompson <jo...@ncsu.edu>
> Sent: Tuesday, September 29, 2020 4:28 PM
> To: user@vcl.apache.org
> Cc: MARTINEZ, ARIEL <AM...@hostos.cuny.edu>
> Subject: Re: [Suspected SPAM] Re: [EXTERNAL] Re: ADFS SSO Authentication
> Importance: Low
>

--
-------------------------------
Josh Thompson
Systems Programmer
Virtual Computing Lab (VCL)
North Carolina State University

Josh_Thompson@ncsu.edu
919-515-5323

my GPG/PGP key can be found on pool.sks-keyservers.net

All electronic mail messages in connection with State business which
are sent to or received by this account are subject to the NC Public
Records Law and may be disclosed to third parties.