[java-identity-provider] branch main updated: Fix some error messages and a bug in JAAS config.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=0093b32452687b8646c7fd4f685041f6501ffa05

The following commit(s) were added to refs/heads/main by this push:
       new  0093b3245 Fix some error messages and a bug in JAAS config.
0093b3245 is described below

commit 0093b32452687b8646c7fd4f685041f6501ffa05
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Sep 15 16:38:14 2020 -0400

    Fix some error messages and a bug in JAAS config.
---
 .../idp/authn/impl/JAASCredentialValidator.java       |  2 +-
 .../idp/flows/authn/password-authn-beans.xml          |  2 +-
 .../idp/module/conf/authn/password-authn-config.xml   | 19 +++++++++++++++++++
 3 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/JAASCredentialValidator.java b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/JAASCredentialValidator.java
index 53e9e8d4f..42917c3b3 100644
--- a/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/JAASCredentialValidator.java
+++ b/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/JAASCredentialValidator.java
@@ -220,7 +220,7 @@ public class JAASCredentialValidator extends AbstractUsernamePasswordCredentialV
                 try {
                     loginConfigParameters = new URIParameter(loginConfigResource.getURI());
                 } catch (final IOException e) {
-                    throw new ComponentInitializationException("Unable to login configuration resource into URI", e);
+                    throw new ComponentInitializationException("Invalid login configuration resource", e);
                 }
             } else {
                 throw new ComponentInitializationException("No login configuration resource or parameters supplied");
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
index bf38d3830..77424603f 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-beans.xml
@@ -118,7 +118,7 @@
             p:loginConfigNames-ref="shibboleth.authn.JAAS.LoginConfigNames"
             p:loginConfigurations="#{getObject('shibboleth.authn.JAAS.LoginConfigurations')}"
             p:loginConfigType="JavaLoginConfig"
-            p:loginConfigResource="'%{idp.authn.JAAS.loginConfig:%{idp.home}/conf/authn/jaas.config}'.trim()"
+            p:loginConfigResource="#{'%{idp.authn.JAAS.loginConfig:%{idp.home}/conf/authn/jaas.config}'.trim()}"
             p:loginConfigParameters="#{getObject('shibboleth.authn.JAAS.JAASConfigURI')}" />
 
     <bean id="shibboleth.authn.JAAS.LoginConfigStrategy.RelyingPartyMap" abstract="true"
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
index 811b0bf42..047aaf014 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
@@ -47,7 +47,12 @@
                 <value>UnknownUsername</value>
                 <value>CLIENT_NOT_FOUND</value>
                 <value>Client not found</value>
+                <value>Cannot get kdc for realm</value>
+                <value>Client not found in Kerberos database</value>
                 <value>DN_RESOLUTION_FAILURE</value>
+                <value>Cannot authenticate dn, invalid dn</value>
+                <value>Cannot authenticate dn, invalid credential</value>
+                <value>AcceptSecurityContext error, data 525</value>
             </list>
         </entry>
         <entry key="InvalidPassword">
@@ -56,17 +61,31 @@
                 <value>PREAUTH_FAILED</value>
                 <value>INVALID_CREDENTIALS</value>
                 <value>Checksum failed</value>
+                <value>Integrity check on decrypted field failed</value>
+                <value>Pre-authentication information was invalid</value>
+                <value>Key bytes cannot be null</value>
+                <value>AcceptSecurityContext error, data 52e</value>
             </list>
         </entry>
         <entry key="AccountLocked">
             <list>
                 <value>AccountLocked</value>
                 <value>Clients credentials have been revoked</value>
+                <value>AcceptSecurityContext error, data 775</value>
+            </list>
+        </entry>
+        <entry key="AccountDisabled">
+            <list>
+                <value>AcceptSecurityContext error, data 533</value>
             </list>
         </entry>
         <entry key="ExpiredPassword">
             <list>
                 <value>PASSWORD_EXPIRED</value>
+                <value>CLIENT KEY EXPIRED</value>
+                <value>AcceptSecurityContext error, data 532</value>
+                <value>AcceptSecurityContext error, data 773</value>
+                <value>AcceptSecurityContext error, data 701</value>
             </list>
         </entry>
         <entry key="ExpiringPassword">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.