warning: session_destroy() [function.session-destroy]: Trying to destroy uninitialized session in shib_auth.module on line 79

smithmb - October 23, 2009 - 12:48
Project:Shibboleth authentication
Version:6.x-3.3
Component:Code
Category:bug report
Priority:normal
Assigned:Unassigned
Status:active
Description

Hello --

If I let both my SP and IdP session expire, and then visit my drupal site, I'm getting the following error:

* Your session is expired. Please log in again!
* warning: session_destroy() [function.session-destroy]: Trying to destroy uninitialized session in /siteroot/modules/shib_auth/shib_auth.module on line 79.

#1

smithmb - November 10, 2009 - 13:44
Priority:normal» critical

Marking critical as there's a giant red drupal error every time this happens, which is basically at least once every day for me.

#2

shafter - November 10, 2009 - 14:18
Priority:critical» normal

I set it back to normal, because showing an error if the session was destroyed is a feature, not a bug. A new security feature makes the module to destroy the session twice in this case, that's why it displays an error message. The solution is ready, and will be commited along with other features and fixes soon.
If you want a quick solution, cut the contents of line 70 paste in line 60 in shib_auth.module, and modify line 71, write elseif instead of if.

Thanks,
shafter - NIIF member

#3

smithmb - November 12, 2009 - 19:25

Thanks!

 
 

Drupal is a registered trademark of Dries Buytaert.