=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2023.08.31 15:59:26 =~=~=~=~=~=~=~=~=~=~=~= sho   debug webvpn saml 255 INFO: debug webvpn saml enabled at level 255. ciscoasa# debug webvpn 255 INFO: debug webvpn enabled at level 255. ciscoasa# debug webvpn session 255 INFO: debug webvpn session enabled at level 255. ciscoasa# debug webvpn request 255 INFO: debug webvpn request enabled at level 255. ciscoasa# #0x00007f43885d91c0 (POST). Request line:/ #0x00007f43885d91c0 File to execute: /CSCOSSLC/config-auth Public archive directives retrieved from cache for index 1. #0x00007f43885d7fd0 (GET). Request line:/+CSCOE+/saml/sp/login #0x00007f43885d7fd0 File to execute: /+CSCOE+/saml/sp/login [SAML] Using ephemeral key to generate relay hash: Aug 31 20:00:42 [SAML] build_authnrequest: https://login.microsoftonline.com/f07198db-cebb-456f-aeea-7b0fd823c16e/saml2?SAMLRequest=fVJdT4MwFP0rpO%2FQwr4bWLLBSJaoWdT44IvpysU1KS32lqn%2FXmCazAd9vfecez7aFEWjW77p%2FMncw1sH6IOPRhvk4yIjnTPcClTIjWgAuZf8YXN7w5OI8dZZb6XV5IryP0MggvPKGhLsi4y8FNPpluVst9qt8nJVJosdm8yXeTnblQXLtwkJnsBhj89IT%2B9JiB3sDXphfD9iySRky3ASPyaMM8an8TMJij6DMsKPrJP3LXJKtX1VJmqUdBZt7a3RykAkbUNrtohXy%2BoYSjgew%2BlsXocCQISLI6urZTKR8RzokKw3U1onYewqI951MBg69JnUGTJSC41A1umA5aNRt%2F6RP7cmskbaziGcbHNRHoAUW9qAF5XwggoULE7p9YH08j53fZP74mC1kp%2BDi0b4v4uOo3icqCqsRyjvDLYgVa2gIsFGa%2FueOxAevlPQ9UX09z9YfwE%3D&RelayState=ctx%3D274158414%26relay_sig%3DwCl35YZytOP%252FBHO%252FNgLoUDpPsuFOLtu1MqIRKY2V%252BnU%253D [SAML] saml_is_idp_internal: getting SAML config for tg asa01 #0x00007f43885d7fd0 (GET). Request line:/+CSCOE+/logon.html #0x00007f43885d7fd0 File to execute: /+CSCOE+/logon.html #0x00007f43885d8f30 (POST). Request line:/+webvpn+/index.html #0x00007f43885d8f30 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43cc008bd0 len2/8 < b_BuffLeft(bp)/88 length of new buffer 0x00007f4388ffcac0 is 36/80 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_portal.c:webvpn_login_set_tg_buffer_from_form[3104] webvpn_portal.c:webvpn_login_transcend_cert_auth_cookie[3140] webvpn_login_transcend_cert_auth_cookie: tg_cookie = NULL, tg_name = asa01 webvpn_portal.c:webvpn_login_set_tg_cookie_form[3213] webvpn_portal.c:webvpn_login_set_tg_cookie_querry_string[3270] webvpn_portal.c:webvpn_login_resolve_tunnel_group[3352] webvpn_login_resolve_tunnel_group: tgCookie = NULL webvpn_login_resolve_tunnel_group: tunnel group name from group list webvpn_login_resolve_tunnel_group: TG_BUFFER = asa01 webvpn_portal.c:webvpn_login_negotiate_client_cert[3489] webvpn_portal.c:webvpn_login_check_cert_status[3616] webvpn_portal.c:webvpn_login_cert_only[3718] webvpn_portal.c:webvpn_login_saml_auth[3748] webvpn_portal.c:webvpn_login_primary_username[3786] ewaFormSubmit_webvpn_login() -> send WEBVPN_PAGE_LOGIN webvpn_free_auth_struct: net_handle = 0x00007f43cc008bd0 webvpn_allocate_auth_struct: net_handle = 0x00007f43cc008bd0 webvpn_free_auth_struct: net_handle = 0x00007f43cc008bd0 #0x00007f43885d7fd0 (POST). Request line:/+CSCOE+/saml/sp/acs #0x00007f43885d7fd0 File to execute: /+CSCOE+/saml/sp/acs [SAML] Using ephemeral relay key to validate relay hash #0x00007f43885d7fd0 (POST). Request line:/+webvpn+/index.html #0x00007f43885d7fd0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 #0x00007f43885d8f30 (GET). Request line:/favicon.ico #0x00007f43885d8f30 File to execute: /favicon.ico len1/28 < len2/878 length of new buffer 0x00007f4388ec49c0 is 906/666 prefix left=286 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_portal.c:webvpn_login_set_tg_buffer_from_form[3104] webvpn_portal.c:webvpn_login_transcend_cert_auth_cookie[3140] webvpn_login_transcend_cert_auth_cookie: tg_cookie = , tg_name = asa01 webvpn_portal.c:webvpn_login_set_tg_cookie_form[3213] webvpn_portal.c:webvpn_login_set_tg_cookie_querry_string[3270] webvpn_portal.c:webvpn_login_resolve_tunnel_group[3352] webvpn_login_resolve_tunnel_group: tgCookie = webvpn_login_resolve_tunnel_group: tunnel group name from group list webvpn_login_resolve_tunnel_group: TG_BUFFER = asa01 webvpn_portal.c:webvpn_login_negotiate_client_cert[3489] webvpn_portal.c:webvpn_login_check_cert_status[3616] webvpn_portal.c:webvpn_login_cert_only[3718] webvpn_portal.c:webvpn_login_saml_auth[3748] webvpn_portal.c:webvpn_login_primary_username[3786] Aug 31 20:01:07 [SAML] consume_assertion: authn_response PHNhbWxwOlJlc3BvbnNlIElEPSJfYzhjNzQ5MTEtNDRmYS00ZDVhLTkyOWUtMzk5 NmI2ZDE4ODUzIiBWZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAyMy0wOC0z MVQyMDowMTowNy41OTRaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly92cG4ub25jb3Vy c2Vob21lLmNvbS8rQ1NDT0UrL3NhbWwvc3AvYWNzP3RnbmFtZT1hc2EwMSIgSW5S ZXNwb25zZVRvPSJfRDQ0QjBDMEU5RTlDRjlGMjdFMDM2OENGNUVGRDBDQjIiIHht bG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wi PjxJc3N1ZXIgeG1sbnM9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3Nl cnRpb24iPmh0dHBzOi8vc3RzLndpbmRvd3MubmV0L2YwNzE5OGRiLWNlYmItNDU2 Zi1hZWVhLTdiMGZkODIzYzE2ZS88L0lzc3Vlcj48c2FtbHA6U3RhdHVzPjxzYW1s cDpTdGF0dXNDb2RlIFZhbHVlPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6 c3RhdHVzOlN1Y2Nlc3MiLz48L3NhbWxwOlN0YXR1cz48QXNzZXJ0aW9uIElEPSJf ZGY3YzMyODItMDk2ZS00YTgwLWFjOTEtYWM4MjQ2M2I3MDAxIiBJc3N1ZUluc3Rh bnQ9IjIwMjMtMDgtMzFUMjA6MDE6MDcuNTg2WiIgVmVyc2lvbj0iMi4wIiB4bWxu cz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI+PElzc3Vl cj5odHRwczovL3N0cy53aW5kb3dzLm5ldC9mMDcxOThkYi1jZWJiLTQ1NmYtYWVl YS03YjBmZDgyM2MxNmUvPC9Jc3N1ZXI+PFNpZ25hdHVyZSB4bWxucz0iaHR0cDov L3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+PFNpZ25lZEluZm8+PENhbm9u aWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8y MDAxLzEwL3htbC1leGMtYzE0biMiLz48U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRo bT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNo YTI1NiIvPjxSZWZlcmVuY2UgVVJJPSIjX2RmN2MzMjgyLTA5NmUtNGE4MC1hYzkx LWFjODI0NjNiNzAwMSI+PFRyYW5zZm9ybXM+PFRyYW5zZm9ybSBBbGdvcml0aG09 Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2ln bmF0dXJlIi8+PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3Jn LzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvVHJhbnNmb3Jtcz48RGlnZXN0TWV0 aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMj c2hhMjU2Ii8+PERpZ2VzdFZhbHVlPmxxWGw4S0NBQWZSM0hyK2pHT3VPL0dwbGVS MnJyWGFXYW9XVHBSazluL1k9PC9EaWdlc3RWYWx1ZT48L1JlZmVyZW5jZT48L1Np Z25lZEluZm8+PFNpZ25hdHVyZVZhbHVlPktGbWdmNko2K2JwbXdBSFQ1OUNuNk5U Y1BUUjB2cXhNb0FBNzZyVlk0eEpTV3ZSY1FMOVk0blJxQjE2Y0hvSFdhNHBTOHFt TllIUXVEc1RFOFhwK20raFNqRmR6S3dPNUFlU25wOEpzc1dmT0gra0hiSGdIdnhM R3dDUXplQlVBVGNFTGlsTXhweWxqb2liWGNRU2xuRHp3ZTFDQjc1SCtLYVdYN0Yy WFN4eU9JaXhlQitzUXc0cUZOYzVPMVU1WHZZamE4VmJsTEt4eUQ1bkpLSkd1b1hw NFZCU2l4Y0pnSEFVR05LM0hNemFsZ2wzK0xBRmhjempJR0VQSkRkQjNuSU4xUTVs alpkOWl4d0liUUlDY29vcnVrK2xCUm9Cem9IZW1KR0sxaVUvQkQ3UGgzdXAyblpH V2dqTFFneXRiV2MwM3ZZcTVVMTlsRW05V0JKb0ZkQT09PC9TaWduYXR1cmVWYWx1 ZT48S2V5SW5mbz48WDUwOURhdGE+PFg1MDlDZXJ0aWZpY2F0ZT5NSUlDOERDQ0Fk aWdBd0lCQWdJUVU5dUxBUDhaMVlkQ3Z1YjFqUDBOM1RBTkJna3Foa2lHOXcwQkFR c0ZBREEwTVRJd01BWURWUVFERXlsTmFXTnliM052Wm5RZ1FYcDFjbVVnUm1Wa1pY SmhkR1ZrSUZOVFR5QkRaWEowYVdacFkyRjBaVEFlRncweU16QTRNekV4TmpVME16 SmFGdzB5TmpBNE16RXhOalUwTXpKYU1EUXhNakF3QmdOVkJBTVRLVTFwWTNKdmMy OW1kQ0JCZW5WeVpTQkdaV1JsY21GMFpXUWdVMU5QSUVObGNuUnBabWxqWVhSbE1J SUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBdjlFZ3h0 cGo4R3ZFNXZpcVRneGY3UUtGMEZDNzNPVGdVN1o2Tjh1MEhOTnIwNHRSTENpRC8r UzZSQWw4bXRDOS9GN0t5QjdLRzJFNHRQejhrV0l3eDFHQVk0eXpIZklxRUxrNFNt VWJ2TEhlVWpuMnNlQjJzN3VDL1dvRm9mL3hUUmZiWWxZaXlQYnc2QVdvZ0w0UUVh VmVzUndPSUtKVzVYNWloaUc5U2R5KzFVRlJHVk5GZU9wUDFabnBDMXdkcXh6T3Bs cVhxZklDSTIyN2RKSk1hUUFnRzIvY2U3OUx5d0FMcXkzNlZ5YzhzSHJSUEcvajl0 Q3JQNUdDNThJVjBmU0lTL0s1MnJENVZSY2ZXWnNmMUVMMEVQZzZtc2NsMkErd1F1 a3cxZjlYMTF0Q2pGZ3dGNHFWYmV4OVorL2QxVjlsQUg3OWxzczg1K3h1QkwxUUJR SURBUUFCTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElCQVFBV0dORCtBTlJ3Tm9oMTRC WTg4ZHg4bENOVHNVeS9wWTdNSm1TMGxBbnpwYVBDZlBQRG0rV2czeGxHY2RCM0dz YmNCTytHRkJzRldPbWJ0dW8xSTZtM0ZkSVI3UUpMbS9WRDl4eUFML2V4VjVxZVZ0 T3pDNkJnYVRKc3VGdW1NR3J3ai93TzJ5MDlPeGdOVzA2bDRyRkJJSk5ja0hieHFP bEZRUjZLOUFKNHZpTlcyejE1N1U4d1dVTTcxNGlUTHVUWFNJMStMNDRreUF2NWNT aDNzbG1aeS9TbW0wZG0vU2xKTkJLbjJsblZmTWZqb3UxcEV2VUtPSTdsU0o0dHYy UHZDcElnY2J5bFlYNUNhSDdZbVc1N1RhajRSYUxqeVFJVHZLalRBTmVVZ2g0cWF6 ZHQxcXNNR1Q5MnY5ZE5EdlZLUFJaMXlGVjRaRzFEQnE3M1AxOVk8L1g1MDlDZXJ0 aWZpY2F0ZT48L1g1MDlEYXRhPjwvS2V5SW5mbz48L1NpZ25hdHVyZT48U3ViamVj dD48TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5h bWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj5hLWVkd2FyZHRAb25jb3Vyc2Vob21l LmNvbTwvTmFtZUlEPjxTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9h c2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI+PFN1YmplY3RDb25maXJt YXRpb25EYXRhIEluUmVzcG9uc2VUbz0iX0Q0NEIwQzBFOUU5Q0Y5RjI3RTAzNjhD RjVFRkQwQ0IyIiBOb3RPbk9yQWZ0ZXI9IjIwMjMtMDgtMzFUMjE6MDE6MDcuNDM2 WiIgUmVjaXBpZW50PSJodHRwczovL3Zwbi5vbmNvdXJzZWhvbWUuY29tLytDU0NP RSsvc2FtbC9zcC9hY3M/dGduYW1lPWFzYTAxIi8+PC9TdWJqZWN0Q29uZmlybWF0 aW9uPjwvU3ViamVjdD48Q29uZGl0aW9ucyBOb3RCZWZvcmU9IjIwMjMtMDgtMzFU MTk6NTY6MDcuNDM2WiIgTm90T25PckFmdGVyPSIyMDIzLTA4LTMxVDIxOjAxOjA3 LjQzNloiPjxBdWRpZW5jZVJlc3RyaWN0aW9uPjxBdWRpZW5jZT5odHRwczovL3Zw bi5vbmNvdXJzZWhvbWUuY29tL3NhbWwvc3AvbWV0YWRhdGEvYXNhMDE8L0F1ZGll bmNlPjwvQXVkaWVuY2VSZXN0cmljdGlvbj48L0NvbmRpdGlvbnM+PEF0dHJpYnV0 ZVN0YXRlbWVudD48QXR0cmlidXRlIE5hbWU9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jv c29mdC5jb20vaWRlbnRpdHkvY2xhaW1zL3RlbmFudGlkIj48QXR0cmlidXRlVmFs dWU+ZjA3MTk4ZGItY2ViYi00NTZmLWFlZWEtN2IwZmQ4MjNjMTZlPC9BdHRyaWJ1 dGVWYWx1ZT48L0F0dHJpYnV0ZT48QXR0cmlidXRlIE5hbWU9Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vaWRlbnRpdHkvY2xhaW1zL29iamVjdGlkZW50aWZp ZXIiPjxBdHRyaWJ1dGVWYWx1ZT5jZDUwY2M2Zi1hYjQ1LTRmMzYtOTZjOC02OGU3 MTZhNDk3Njg8L0F0dHJpYnV0ZVZhbHVlPjwvQXR0cmlidXRlPjxBdHRyaWJ1dGUg TmFtZT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9pZGVudGl0eS9jbGFp bXMvZGlzcGxheW5hbWUiPjxBdHRyaWJ1dGVWYWx1ZT5BZG1pbiBFZHdhcmQgVHJv aWFubzwvQXR0cmlidXRlVmFsdWU+PC9BdHRyaWJ1dGU+PEF0dHJpYnV0ZSBOYW1l PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2lkZW50aXR5L2NsYWltcy9p ZGVudGl0eXByb3ZpZGVyIj48QXR0cmlidXRlVmFsdWU+aHR0cHM6Ly9zdHMud2lu ZG93cy5uZXQvZjA3MTk4ZGItY2ViYi00NTZmLWFlZWEtN2IwZmQ4MjNjMTZlLzwv QXR0cmlidXRlVmFsdWU+PC9BdHRyaWJ1dGU+PEF0dHJpYnV0ZSBOYW1lPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2NsYWltcy9hdXRobm1ldGhvZHNyZWZl cmVuY2VzIj48QXR0cmlidXRlVmFsdWU+aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0 LmNvbS93cy8yMDA4LzA2L2lkZW50aXR5L2F1dGhlbnRpY2F0aW9ubWV0aG9kL3Bh c3N3b3JkPC9BdHRyaWJ1dGVWYWx1ZT48QXR0cmlidXRlVmFsdWU+aHR0cDovL3Nj aGVtYXMubWljcm9zb2Z0LmNvbS9jbGFpbXMvbXVsdGlwbGVhdXRobjwvQXR0cmli dXRlVmFsdWU+PC9BdHRyaWJ1dGU+PEF0dHJpYnV0ZSBOYW1lPSJodHRwOi8vc2No ZW1hcy54bWxzb2FwLm9yZy93cy8yMDA1LzA1L2lkZW50aXR5L2NsYWltcy9naXZl bm5hbWUiPjxBdHRyaWJ1dGVWYWx1ZT5BZG1pbiBFZHdhcmQ8L0F0dHJpYnV0ZVZh bHVlPjwvQXR0cmlidXRlPjxBdHRyaWJ1dGUgTmFtZT0iaHR0cDovL3NjaGVtYXMu eG1sc29hcC5vcmcvd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvc3VybmFtZSI+ PEF0dHJpYnV0ZVZhbHVlPlRyb2lhbm88L0F0dHJpYnV0ZVZhbHVlPjwvQXR0cmli dXRlPjxBdHRyaWJ1dGUgTmFtZT0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcv d3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvbmFtZSI+PEF0dHJpYnV0ZVZhbHVl PmEtZWR3YXJkdEBvbmNvdXJzZWhvbWUuY29tPC9BdHRyaWJ1dGVWYWx1ZT48L0F0 dHJpYnV0ZT48L0F0dHJpYnV0ZVN0YXRlbWVudD48QXV0aG5TdGF0ZW1lbnQgQXV0 aG5JbnN0YW50PSIyMDIzLTA4LTMxVDIwOjAxOjA3LjUzOFoiIFNlc3Npb25JbmRl eD0iX2RmN2MzMjgyLTA5NmUtNGE4MC1hYzkxLWFjODI0NjNiNzAwMSI+PEF1dGhu Q29udGV4dD48QXV0aG5Db250ZXh0Q2xhc3NSZWY+dXJuOm9hc2lzOm5hbWVzOnRj OlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L0F1dGhuQ29udGV4dENsYXNz UmVmPjwvQXV0aG5Db250ZXh0PjwvQXV0aG5TdGF0ZW1lbnQ+PC9Bc3NlcnRpb24+ PC9zYW1scDpSZXNwb25zZT4= Aug 31 20:01:07 [SAML] NotBefore:2023-08-31T19:56:07.436Z NotOnOrAfter:2023-08-31T21:01:07.436Z timeout: 0 Aug 31 20:01:07 [SAML] consume_assertion: saml_session: htt ps://sts.windows.net/f07198db-cebb-456f-aeea-7b0fd823c16e/lqXl8KCAAfR3Hr+jGOuO/GpleR2rrXaWaoWTpRk9n/Y=KFmgf6J6+bpm wAHT59Cn6NTcPTR0vqxMoAA76rVY4xJSWvRcQL9Y4nRqB16cHoHWa4pS8qmNYHQu DsTE8Xp+m+hSjFdzKwO5AeSnp8JssWfOH+kHbHgHvxLGwCQzeBUATcELilMxpylj oibXcQSlnDzwe1CB75H+KaWX7F2XSxyOIixeB+sQw4qFNc5O1U5XvYja8VblLKxy D5nJKJGuoXp4VBSixcJgHAUGNK3HMzalgl3+LAFhczjIGEPJDdB3nIN1Q5ljZd9i xwIbQICcooruk+lBRoBzoHemJGK1iU/BD7Ph3up2nZGWgjLQgytbWc03vYq5U19l Em9WBJoFdA==MIIC8DCCAdigAwIBAgIQU9uLAP8Z1YdCvub1jP0N3TANBgkqhkiG9w0BAQsFADA 0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZ pY2F0ZTAeFw0yMzA4MzExNjU0MzJaFw0yNjA4MzExNjU0MzJaMDQxMjAwBgNVBAM TKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjA NBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Egxtpj8GvE5viqTgxf7QKF0FC 73OTgU7Z6N8u0HNNr04tRLCiD/+S6RAl8mtC9/F7KyB7KG2E4tPz8kWIwx1GAY4y zHfIqELk4SmUbvLHeUjn2seB2s7uC/WoFof/xTRfbYlYiyPbw6AWogL4QEaVesRw OIKJW5X5ihiG9Sdy+1UFRGVNFeOpP1ZnpC1wdqxzOplqXqfICI227dJJMaQAgG2/ ce79LywALqy36Vyc8sHrRPG/j9tCrP5GC58IV0fSIS/K52rD5VRcfWZsf1EL0EPg 6mscl2A+wQukw1f9X11tCjFgwF4qVbex9Z+/d1V9lAH79lss85+xuBL1QBQIDAQA BMA0GCSqGSIb3DQEBCwUAA4IBAQAWGND+ANRwNoh14BY88dx8lCNTsUy/pY7MJmS 0lAnzpaPCfPPDm+Wg3xlGcdB3GsbcBO+GFBsFWOmbtuo1I6m3FdIR7QJLm/VD9xy AL/exV5qeVtOzC6BgaTJsuFumMGrwj/wO2y09OxgNW06l4rFBIJNckHbxqOlFQR6 K9AJ4viNW2z157U8wWUM714iTLuTXSI1+L44kyAv5cSh3slmZy/Smm0dm/SlJNBK n2lnVfMfjou1pEvUKOI7lSJ4tv2PvCpIgcbylYX5CaH7YmW57Taj4RaLjyQITvKj TANeUgh4qazdt1qsMGT92v9dNDvVKPRZ1yFV4ZG1DBq73P19Ytest@o ncoursehome.comhttps://vpn.onc oursehome.com/saml/sp/metadata/asa01f0 7198db-cebb-456f-aeea-7b0fd823c16e< Attribute Name="http://schemas.microsoft.com/identity/claims/obj ectidentifier">cd50cc6f-ab45-4f36-96c8-68e716a49 768Admin Testhttps://sts.windows.net/f07198db-cebb-456f-aeea-7b0f d823c16e/http://schemas.microsoft.com/ws/2008/06/identity/authenticati onmethod/passwordhttp://schemas .microsoft.com/claims/multipleauthn Admin Edward< /Attribute>Testtest@testho me.comurn:oasis:names:tc:SAML:2.0:ac:classes:Password test@test.com [SAML] consume_assertion [saml] webvpn_login_primary_username: SAML assertion validation succeeded webvpn_portal.c:webvpn_login_primary_password[3951] webvpn_portal.c:webvpn_login_secondary_username[3981] webvpn_portal.c:webvpn_login_secondary_password[4068] webvpn_portal.c:webvpn_login_extra_password[4119] webvpn_portal.c:webvpn_login_set_cookie_flag[4141] webvpn_portal.c:webvpn_login_set_auth_group_type[4165] webvpn_login_set_auth_group_type: WEBVPN_AUTH_GROUP_TYPE = 5 webvpn_portal.c:webvpn_login_aaa_resuming[4186] webvpn_auth.c:http_webvpn_post_authorize[2365] http_webvpn_post_authorize: AUTH_ACCEPT, WEBVPN_AUTH_USERNAME = test@test.com webvpn_auth.c:http_webvpn_auth_accept[2768] saml_ac_token_list_add_entry: Pre_auth token: 274158414 Token 0941FFCF07EB982E1E5AEAA9 created with timeout 60 Username [hidden username] added to list with token 0941FFCF07EB982E1E5AEAA9 webvpn_remove_auth_handle: auth_handle = 0 http_remove_auth_handle(): handle 0 not found! webvpn_portal.c:webvpn_login_aaa_resuming[4206] ewaFormSubmit_webvpn_login() -> redirect status=1 ret='NULL' webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0 #0x00007f43885d7ab0 (GET). Request line:/+CSCOE+/logon.html #0x00007f43885d7ab0 File to execute: /+CSCOE+/logon.html #0x00007f43885d7ab0 (GET). Request line:/+CSCOE+/saml_ac_login.html #0x00007f43885d7ab0 File to execute: /+CSCOE+/saml_ac_login.html saml_get_ac_token_data: Unencrypted Token found 0941FFCF07EB982E1E5AEAA9 #0x00007f43885d91c0 (POST). Request line:/ #0x00007f43885d91c0 File to execute: /CSCOSSLC/config-auth saml_ac_v2_process_auth_request: SAML ac token being looked 0941FFCF07EB982E1E5AEAA9 SAML AUTH: authentication success saml_get_ac_token_data: Unencrypted Token found 0941FFCF07EB982E1E5AEAA9 Public archive directives retrieved from cache for index 1. #0x00007f43885d91c0 (GET). Request line:/+CSCOE+/saml/sp/logout #0x00007f43885d91c0 File to execute: /+CSCOE+/saml/sp/logout #0x00007f43885d7ab0 (POST). Request line:/+webvpn+/webvpn_logout.html #0x00007f43885d7ab0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 len1/36 < len2/832 length of new buffer 0x00007f4388ebed00 is 868/704 prefix left=286 webvpn_auth.c:webvpn_auth[727] WebVPN: no cookie present!! webvpn_portal.c:ewaFormSubmit_webvpn_logout[2573] webvpn_portal.c:http_webvpn_kill_cookie[1236] webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 #0x00007f43885d8f30 (GET). Request line:/+CSCOE+/logon.html #0x00007f43885d8f30 File to execute: /+CSCOE+/logon.html #0x00007f43885d8f30 (GET). Request line:/+CSCOE+/saml_ac_login.html #0x00007f43885d8f30 File to execute: /+CSCOE+/saml_ac_login.html saml_get_ac_token_data: Passed SAML token is NULL #0x00007f43885d8f30 (GET). Request line:/favicon.ico #0x00007f43885d8f30 File to execute: /favicon.ico saml_ac_token_remove: SAML ac token being looked 0941FFCF07EB982E1E5AEAA9 saml token ID 0941FFCF07EB982E1E5AEAA9 removed from table #0x00007f43885d7fd0 (POST). Request line:/+webvpn+/index.html #0x00007f43885d7fd0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 len1/28 < len2/413 length of new buffer 0x00007f4388ec6440 is 441/1131 prefix left=286 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_login_csrf_token: CSRF token param is not found in the request's body ewaFormSubmit_webvpn_login() -> send WEBVPN_PAGE_LOGIN webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 #0x00007f43885d91c0 (POST). Request line:/+webvpn+/index.html #0x00007f43885d91c0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 len1/28 < len2/339 length of new buffer 0x00007f4388ec8c00 is 367/1205 prefix left=286 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_login_csrf_token: CSRF token param is not found in the request's body ewaFormSubmit_webvpn_login() -> send WEBVPN_PAGE_LOGIN webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_allocate_auth_struct: net_handle = 0x00007f43cc0cc1d0 webvpn_free_auth_struct: net_handle = 0x00007f43cc0cc1d0 #0x00007f43885d7fd0 (POST). Request line:/+webvpn+/index.html #0x00007f43885d7fd0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 len1/28 < len2/389 length of new buffer 0x00007f4388ea9480 is 417/1155 prefix left=286 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_login_csrf_token: CSRF token param is not found in the request's body ewaFormSubmit_webvpn_login() -> send WEBVPN_PAGE_LOGIN webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0 #0x00007f43885d91c0 (POST). Request line:/+webvpn+/index.html #0x00007f43885d91c0 Hand-off to emWeb. webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 len1/28 < len2/324 length of new buffer 0x00007f4388ec6440 is 352/1220 prefix left=286 webvpn_portal.c:ewaFormSubmit_webvpn_login[4338] webvpn_portal.c:webvpn_login_validate_net_handle[2945] webvpn_portal.c:webvpn_login_allocate_auth_struct[2962] webvpn_portal.c:webvpn_login_assign_app_next[2984] webvpn_portal.c:webvpn_login_cookie_check[3005] webvpn_portal.c:webvpn_login_csrf_token[3049] webvpn_login_csrf_token: CSRF token param is not found in the request's body ewaFormSubmit_webvpn_login() -> send WEBVPN_PAGE_LOGIN webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_allocate_auth_struct: net_handle = 0x00007f43c01c3ee0 webvpn_free_auth_struct: net_handle = 0x00007f43c01c3ee0