Bug ID 651229: tmm may restart when SAML SLO is initiated by SP using redirect binding

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3

Fixed In:
13.1.0, 13.0.1

Opened: Mar 14, 2017
Severity: 2-Critical
Related AskF5 Article:
K14429395

Symptoms

When the BIG-IP system is configured as SAML SP, there are two bindings supported for SLO profile: HTTP-Redirect and HTTP-POST (default option). If the BIG-IP system is configured to initiate SAML SP SLO profile with redirect binding - tmm may restart.

Impact

tmm restarts. Traffic disrupted while tmm restarts.

Conditions

-- Configure the BIG-IP system as SAML SP. -- Configure HTTP-Redirect binding for SLO profile. -- Initiate SLO on SAML SP.

Workaround

Reconfigure the BIG-IP system to use HTTP-POST binding for SLO profile. Configuration should be changed on IDP connector objects.

Fix Information

tmm no longer restarts when SAML SLO is initiated by SP using redirect binding.

Behavior Change