Venimos avanzando Richard. De nuevo gracias.
Generé los usuarios en el Mapuche y luego los probé que funcionen ok. Luego hice nuevamente todo el proceso de conexión entre mapuche y sistema de expedientes nuevamente y luego apliqué los ajustes vistos hasta acá.
Ahora no me da más el error anterior que el usuario no existe. Solo dice “error interno”. Entiendo que el idp está bien porque me muestra el historial de conexiones de cada usuario, adjunto captura.
El log del idp indica lo siguiente:
suarios_idp.1.x78369gxy6f6@seei1 | 10.0.9.3 - - [06/Sep/2021:17:43:24 -0300] “GET /idp/saml2/idp/SSOService.php?SAMLRequest=jVPLjtowFN3zFSh7kpBH1bEgVQp9IFGISKaLbipjX0qkxHZ97Q7z93UeU5iqQvXG0fU9x%2Bcc3yyQto0iuTVncYCfFtBMpm5d2kYg6Q%2BXntWCSIo1EkFbQGIYKfMvWxL5IVFaGslk4%2F0Fu4%2BiiKBNLcUA26yX3n73Ybv%2FtNl9T94ylkQhxGkapknK58dTeIzTU0oTTo80nfMkZg9xMkC%2FgkbHs%2FQcrTcZ2BAtbAQaKoyrh9F8Fj7MwjdVFJIkJlHybYCundlaUNPDz8YoJEGAAPXct5SD9oFbn%2Bqg5iroLEX9V1nuS9C%2Faga%2BOquBqRhDeF8LXosf970fhyYkn6uqmBX7shpI8pdMVlKgbUGP1zwetld5LVXWON2vFXZVdobgHWXoZT3bolNM%2Bih09n9oDidqGzNDtQhu0Vc%2BRXbOzmZdyKZmz329Wx%2BlbqmLeiR4dD5yxqQVxvvTkzeNfFppoAaWntEWvGnwinmcPuD9LLoMDFzMdCVbRXWN3RPBhTIz2rtavG1fNW6wDnDK7s4eI6zrc%2BXCbU9S8%2B79gLm7K00FKqnNmMA%2FyQfVwR3Z2eTl%2BPbHyn4D&RelayState=https%3A%2F%2F10.1.1.228%3A8080%2Fmapuche%2F HTTP/1.1” 302 1696
usuarios_idp.1.x78369gxy6f6@seei1 | 10.0.9.3 - - [06/Sep/2021:17:43:24 -0300] “GET /idp/module.php/arai/loginuserpass.php?AuthState=_008ea9c46992a8c62e35b4ef0115eda2577fb4fae2%3Ahttps%3A%2F%2Fseei1.uader.edu.ar%2Fidp%2Fsaml2%2Fidp%2FSSOService.php%3Fspentityid%3Dhttps%253A%252F%252Fmaputest.uader.edu.ar%252Fmapuche%252Fdefault-sp%26RelayState%3Dhttps%253A%252F%252F10.1.1.228%253A8080%252Fmapuche%252F%26cookieTime%3D1630961004 HTTP/1.1” 200 3445
usuarios_idp.1.x78369gxy6f6@seei1 | [Mon Sep 06 17:43:33.519647 2021] [php7:notice] [pid 14] [client 10.0.9.3:38012] simplesamlphp NOTICE STAT [c13c2ff9a2] User ‘mchiecher’ successfully authenticated from 10.0.9.3, referer: https://seei1.uader.edu.ar/idp/module.php/arai/loginuserpass.php?AuthState=_008ea9c46992a8c62e35b4ef0115eda2577fb4fae2%3Ahttps%3A%2F%2Fseei1.uader.edu.ar%2Fidp%2Fsaml2%2Fidp%2FSSOService.php%3Fspentityid%3Dhttps%253A%252F%252Fmaputest.uader.edu.ar%252Fmapuche%252Fdefault-sp%26RelayState%3Dhttps%253A%252F%252F10.1.1.228%253A8080%252Fmapuche%252F%26cookieTime%3D1630961004
usuarios_idp.1.x78369gxy6f6@seei1 | [Mon Sep 06 17:43:33.561034 2021] [php7:notice] [pid 14] [client 10.0.9.3:38012] simplesamlphp NOTICE STAT [c13c2ff9a2] saml20-idp-SSO-first https://maputest.uader.edu.ar/mapuche/default-sp https://seei1.uader.edu.ar/idp/saml2/idp/metadata.php NA, referer: https://seei1.uader.edu.ar/idp/module.php/arai/loginuserpass.php?AuthState=_008ea9c46992a8c62e35b4ef0115eda2577fb4fae2%3Ahttps%3A%2F%2Fseei1.uader.edu.ar%2Fidp%2Fsaml2%2Fidp%2FSSOService.php%3Fspentityid%3Dhttps%253A%252F%252Fmaputest.uader.edu.ar%252Fmapuche%252Fdefault-sp%26RelayState%3Dhttps%253A%252F%252F10.1.1.228%253A8080%252Fmapuche%252F%26cookieTime%3D1630961004
usuarios_idp.1.x78369gxy6f6@seei1 | [Mon Sep 06 17:43:33.561369 2021] [php7:notice] [pid 14] [client 10.0.9.3:38012] simplesamlphp NOTICE STAT [c13c2ff9a2] saml20-idp-SSO https://maputest.uader.edu.ar/mapuche/default-sp https://seei1.uader.edu.ar/idp/saml2/idp/metadata.php NA, referer: https://seei1.uader.edu.ar/idp/module.php/arai/loginuserpass.php?AuthState=_008ea9c46992a8c62e35b4ef0115eda2577fb4fae2%3Ahttps%3A%2F%2Fseei1.uader.edu.ar%2Fidp%2Fsaml2%2Fidp%2FSSOService.php%3Fspentityid%3Dhttps%253A%252F%252Fmaputest.uader.edu.ar%252Fmapuche%252Fdefault-sp%26RelayState%3Dhttps%253A%252F%252F10.1.1.228%253A8080%252Fmapuche%252F%26cookieTime%3D1630961004
usuarios_idp.1.x78369gxy6f6@seei1 | 10.0.9.3 - - [06/Sep/2021:17:43:33 -0300] “POST /idp/module.php/arai/loginuserpass.php HTTP/1.1” 200 14843
El log del Mapuche en cambio muestra:
[Mon Sep 06 17:43:34.498994 2021] [php7:notice] [pid 20] [client 172.19.0.1:41828] Errores en el proceso de onelogin: , referer: https://seei1.uader.edu.ar/
[Mon Sep 06 17:43:34.499037 2021] [php7:notice] [pid 20] [client 172.19.0.1:41828] array (\n 0 => ‘invalid_response’,\n), referer: https://seei1.uader.edu.ar/
[Mon Sep 06 17:43:34.499049 2021] [php7:notice] [pid 20] [client 172.19.0.1:41828] Signature validation failed. SAML Response rejected, referer: https://seei1.uader.edu.ar/
[Mon Sep 06 17:43:34.499182 2021] [php7:notice] [pid 20] [client 172.19.0.1:41828] toba_error_seguridad: Error Interno Se produjo un error durante el procedimiento de login, contacte un administrador\n[TRAZA]\n\t\n\ttoba_autenticacion_saml_onelogin->verificar_errores_onelogin \nArchivo: /usr/local/siu/mapuche/vendor/siu-toba/framework/php/nucleo/lib/autenticacion/toba_autenticacion_saml_onelogin.php, lInea 256 \nParametros: \nInstancia de OneLogin\Saml2\Auth \t\n\t\n\ttoba_autenticacion_saml_onelogin->verificar_acceso \nArchivo: /usr/local/siu/mapuche/php/comunes/login/ci_login.php, lInea 249 \n\t\n\tci_login->evt__cas__ingresar \nArchivo: /usr/local/siu/mapuche/php/comunes/login/ci_login.php, lInea 43 \n\t\n\tci_login->ini \nArchivo: /usr/local/siu/mapuche/vendor/siu-toba/framework/php/nucleo/componentes/interface/toba_ci.php, lInea 94 \n\t\n\ttoba_ci->inicializar \nArchivo: /usr/local/siu/mapuche/vendor/siu-toba/framework/php/nucleo/toba_solicitud_web.php, lInea 132 \n\t\n\ttoba_solicitud_web->procesar_eventos \nArchivo: /usr/local/siu/mapuche/vendor/siu-toba/framework/php/nucleo/toba_solicitud_web.php, lInea 5…SIGUE…, referer: https://seei1.uader.edu.ar/
